@tanngo11/log 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.4.0
+
+Added:
+- `@tanngo11/log/strapi` for Strapi 5:
+  - `strapiLoggerConfig(log)` for `config/logger.ts`, so `strapi.log.*` becomes contract JSON;
+  - `strapiRequestLogger`, which replaces `strapi::logger` and writes one `http.request` line per
+    request;
+  - `strapiErrorCapture`, which makes an unhandled error appear once instead of twice.
+- `upstream_request_id`: the caller's request id when the service issues its own id.
+
 ## 0.3.0
 
 Added:

package/CONTRACT.md

@@ -30,7 +30,7 @@ stream, nested fields flattened with `_`) → MCP for AI agents.
 | Group | Fields |
 |---|---|
 | Core | `level` (`trace\|debug\|info\|warn\|error\|fatal`), `message`, `event` (required for warn/error/fatal) |
-| Correlation | `request_id`, `trace_id`, `span_id`, `job_name`, `job_id`, `job_attempt`, `user_id` (internal id, never an email), `tenant_id` |
+| Correlation | `request_id`, `upstream_request_id` (the caller's id when this service issues its own), `trace_id`, `span_id`, `job_name`, `job_id`, `job_attempt`, `user_id` (internal id, never an email), `tenant_id` |
 | Inbound HTTP | `http_method`, `http_route` (template, e.g. `/orders/:id`), `http_path` (no query string), `http_status`, `duration_ms` |
 | Outbound HTTP | `peer_service`, `http_method`, `http_url` (no query string or credentials), `http_status`, `duration_ms` |
 | Error | `err_type`, `err_message`, `err_code` (string), `err_stack`, `err_cause` (cause chain joined with ` <- `, max 5) |
@@ -88,6 +88,7 @@ System events shared by all services:
 | `action.completed` | info | a server action finished, including a redirect or not-found (with `action_name`, `duration_ms`) |
 | `action.failed` | error | a server action threw |
 | `console` | by console method | a legacy `console.*` call (with `console_method`) |
+| `strapi.log` | warn/error | a framework or app `strapi.log` warn/error call that carries no `event` of its own |
 
 ## 5. What to log
 

package/README.md

@@ -256,6 +256,55 @@ new Worker("invoices", loggedProcessor(log, "send_invoice_email", async (job) =>
 - When enqueueing from a request, use `queue.add(name, jobData(data))`. The job's logs then carry
   that request's `request_id`.
 
+## Strapi 5
+
+`config/logger.ts` routes every `strapi.log.*` call (app code and framework) through the logger:
+
+```ts
+import { strapiLoggerConfig } from "@tanngo11/log/strapi";
+import { log } from "../src/shared/log";
+
+export default strapiLoggerConfig(log);
+```
+
+`config/middlewares.ts` replaces `'strapi::logger'` and adds the error capture right after
+`'strapi::errors'`:
+
+```ts
+// src/middlewares/http-log/index.ts
+import { strapiRequestLogger } from "@tanngo11/log/strapi";
+import { log } from "../../shared/log";
+export default () => strapiRequestLogger({ log });
+
+// src/middlewares/error-capture/index.ts
+import { strapiErrorCapture } from "@tanngo11/log/strapi";
+export default () => strapiErrorCapture();
+
+// config/middlewares.ts
+return [
+  { resolve: "./src/middlewares/http-log" },      // instead of 'strapi::logger', first in the list
+  "strapi::errors",
+  { resolve: "./src/middlewares/error-capture" }, // right after strapi::errors
+  // ...
+];
+```
+
+- Each request gets one `http.request` line with the full route template (`/api/articles/:id`,
+  read from `@koa/router`), its status and duration.
+- An unhandled error is written once, on that line. The copy that `strapi::errors` logs through
+  `strapi.log.error` is not written again.
+- Errors the app logs itself through `strapi.log.error(err)` stay as their own lines, with
+  `event: "strapi.log"`.
+- `request_id` reuses `ctx.state.requestId` when the app sets one (configurable with `stateKey`).
+  Otherwise a UUID is put there, so the app's own correlation middleware keeps the same id.
+- The caller's `x-request-id` (for example from a Next.js BFF) is not trusted as the request id.
+  It is recorded as `upstream_request_id`, which links both services' logs. Set
+  `trustIncomingRequestId: true` to adopt it instead.
+- Winston levels are mapped: `http` and `verbose` become `debug`, `silly` becomes `trace`.
+  `LOG_LEVEL` filters.
+
+Tested against the versions Strapi 5.51 uses: Koa 2, `@koa/router` 12 and winston 3.10.
+
 ## Prisma (5 and 6)
 
 ```ts

package/dist/strapi.cjs

@@ -0,0 +1,356 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/strapi.ts
+var strapi_exports = {};
+__export(strapi_exports, {
+  strapiErrorCapture: () => strapiErrorCapture,
+  strapiLoggerConfig: () => strapiLoggerConfig,
+  strapiRequestLogger: () => strapiRequestLogger
+});
+module.exports = __toCommonJS(strapi_exports);
+var import_node_stream = require("stream");
+
+// src/context.ts
+var import_node_async_hooks = require("async_hooks");
+
+// src/global.ts
+function globalSingleton(name, make) {
+  const key = /* @__PURE__ */ Symbol.for(`@tanngo11/log.${name}`);
+  const g = globalThis;
+  let value = g[key];
+  if (value === void 0) {
+    value = make();
+    g[key] = value;
+  }
+  return value;
+}
+
+// src/context.ts
+var als = globalSingleton("als", () => new import_node_async_hooks.AsyncLocalStorage());
+function runWithStore(fields, fn) {
+  const parent = als.getStore();
+  const store = { fields: { ...parent?.fields, ...fields }, parent };
+  return als.run(store, () => fn(store));
+}
+function currentStore() {
+  return als.getStore();
+}
+function recordErrorIn(store, err) {
+  store.error = err;
+  for (let s = store.parent; s; s = s.parent) if (s.error === void 0) s.error = err;
+}
+
+// src/redact.ts
+var DEFAULT_REDACT_KEYS = [
+  "password",
+  "passwd",
+  "pwd",
+  "passphrase",
+  "secret",
+  "client_secret",
+  "token",
+  "access_token",
+  "refresh_token",
+  "id_token",
+  "auth_token",
+  "api_key",
+  "apikey",
+  "access_key",
+  "secret_key",
+  "private_key",
+  "authorization",
+  "cookie",
+  "set_cookie",
+  "session_id",
+  "sessionid",
+  "credential",
+  "credentials",
+  "dsn",
+  "connection_string",
+  "conn_string",
+  "jwt",
+  "bearer"
+];
+var SAFE_SUFFIXES = ["_count", "_type", "_length", "_expires_at", "_expires_in", "_ttl", "_at", "_ms", "_enabled"];
+var REDACTED = "[REDACTED]";
+function toSnakeCase(key) {
+  return key.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2").replace(/[^A-Za-z0-9_]+/g, "_").toLowerCase();
+}
+var URL_CREDENTIALS_RE = /([a-z][a-z0-9+.-]*:\/\/)[^\s/@:"']+:[^\s/@"']+@/gi;
+var BEARER_RE = /\bBearer\s+[A-Za-z0-9._~+/=-]+/gi;
+var JWT_RE = /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g;
+var EMAIL_RE = /[A-Za-z0-9._%+-]+@([A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,})/g;
+function globalize(re) {
+  return re.flags.includes("g") ? new RegExp(re.source, re.flags) : new RegExp(re.source, `${re.flags}g`);
+}
+function createRedactor(opts = {}) {
+  const words = [...DEFAULT_REDACT_KEYS];
+  const keyPatterns = [];
+  for (const k of opts.keys ?? []) {
+    if (typeof k === "string") words.push(toSnakeCase(k));
+    else keyPatterns.push(new RegExp(k.source, k.flags.replace("g", "")));
+  }
+  const valuePatterns = (opts.values ?? []).map(globalize);
+  const isSensitive = (key) => {
+    const k = toSnakeCase(key);
+    if (keyPatterns.some((re) => re.test(k))) return true;
+    if (!words.includes(k) && SAFE_SUFFIXES.some((s) => k.endsWith(s))) return false;
+    return words.some((w) => k === w || k.startsWith(`${w}_`) || k.endsWith(`_${w}`) || k.includes(`_${w}_`));
+  };
+  const scrub = (s) => {
+    let out = s.replace(URL_CREDENTIALS_RE, `$1${REDACTED}@`).replace(BEARER_RE, `Bearer ${REDACTED}`).replace(JWT_RE, "[REDACTED_JWT]").replace(EMAIL_RE, "***@$1");
+    for (const re of valuePatterns) out = out.replace(re, REDACTED);
+    return out;
+  };
+  const json = (value) => {
+    if (typeof value === "string") return value;
+    try {
+      const text = JSON.stringify(value, (key, val) => {
+        if (key && val !== null && val !== void 0 && isSensitive(key)) return REDACTED;
+        if (typeof val === "bigint") return val.toString();
+        if (val instanceof Error) return { name: val.name, message: val.message };
+        return val;
+      });
+      return text ?? String(value);
+    } catch {
+      return String(value);
+    }
+  };
+  return { isSensitive, scrub, json };
+}
+var defaultRedactor = createRedactor();
+
+// src/error.ts
+var MAX_CAUSE_DEPTH = 5;
+function isErrorLike(v) {
+  if (v instanceof Error) return true;
+  return typeof v === "object" && v !== null && typeof v.message === "string" && ("stack" in v || "name" in v);
+}
+function errorType(e) {
+  if (e.name && e.name !== "Error") return e.name;
+  const ctor = e.constructor?.name;
+  return ctor && ctor !== "Object" ? ctor : "Error";
+}
+function serializeError(err) {
+  if (!isErrorLike(err)) {
+    if (typeof err === "string") return { err_type: "string", err_message: err };
+    return { err_type: typeof err, err_message: defaultRedactor.json(err) };
+  }
+  const e = err;
+  const out = { err_type: errorType(e), err_message: String(e.message ?? "") };
+  if (e.code !== void 0 && e.code !== null) out.err_code = String(e.code);
+  if (typeof e.stack === "string") out.err_stack = e.stack;
+  const causes = [];
+  let cause = e.cause;
+  while (cause !== void 0 && cause !== null && causes.length < MAX_CAUSE_DEPTH) {
+    if (isErrorLike(cause)) {
+      causes.push(`${errorType(cause)}: ${cause.message}`);
+      cause = cause.cause;
+    } else {
+      causes.push(defaultRedactor.json(cause));
+      cause = void 0;
+    }
+  }
+  if (causes.length > 0) out.err_cause = causes.join(" <- ");
+  return out;
+}
+var logged = globalSingleton("logged", () => /* @__PURE__ */ new WeakSet());
+function markLogged(err) {
+  if (typeof err === "object" && err !== null) logged.add(err);
+}
+function isLogged(err) {
+  return typeof err === "object" && err !== null && logged.has(err);
+}
+
+// src/normalize.ts
+function stripUrl(url) {
+  const noQuery = url.split(/[?#]/, 1)[0] ?? "";
+  return noQuery.replace(/^([a-z][a-z0-9+.-]*:\/\/)[^/@\s]*@/i, "$1");
+}
+
+// src/request-id.ts
+var REQUEST_ID_RE = /^[A-Za-z0-9._-]{1,64}$/;
+var TRACEPARENT_RE = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/;
+function newRequestId() {
+  return globalThis.crypto.randomUUID();
+}
+function first(header) {
+  return Array.isArray(header) ? header[0] : header ?? void 0;
+}
+function parseTraceparent(header) {
+  const value = first(header)?.trim().toLowerCase();
+  const m = value ? TRACEPARENT_RE.exec(value) : null;
+  if (!m) return void 0;
+  const [, version, traceId, spanId] = m;
+  if (version === "ff" || /^0+$/.test(traceId) || /^0+$/.test(spanId)) return void 0;
+  return { trace_id: traceId, span_id: spanId };
+}
+
+// src/http.ts
+var DEFAULT_SKIP_PATHS = [
+  /^\/(health|healthz|ready|readyz|livez)\/?$/,
+  "/favicon.ico",
+  /^\/_next\/static\//
+];
+function shouldSkip(method, path, skipPaths = DEFAULT_SKIP_PATHS) {
+  if (method.toUpperCase() === "OPTIONS") return true;
+  const p = stripUrl(path);
+  return skipPaths.some((s) => typeof s === "string" ? p === s : s.test(p));
+}
+function logHttpRequest(log, info, opts = {}) {
+  if (shouldSkip(info.method, info.path, opts.skipPaths)) return;
+  const level = info.status >= 500 ? "error" : info.status >= 400 ? "warn" : "info";
+  const path = stripUrl(info.path);
+  const errFields = {};
+  if (info.err !== void 0 && info.err !== null) {
+    Object.assign(errFields, serializeError(info.err));
+    if (info.status < 500) delete errFields.err_stack;
+    markLogged(info.err);
+  }
+  const message = info.route ? `${info.method} ${info.route} ${info.status}` : `${info.method} ${info.status}`;
+  log[level](message, {
+    ...info.fields,
+    event: "http.request",
+    http_method: info.method,
+    http_route: info.route,
+    http_path: path,
+    http_status: info.status,
+    duration_ms: info.duration_ms === void 0 ? void 0 : Math.round(info.duration_ms),
+    ...errFields
+  });
+}
+
+// src/strapi.ts
+function routeOf(ctx) {
+  if (typeof ctx._matchedRoute === "string") return ctx._matchedRoute;
+  const path = ctx.state.route?.path;
+  return typeof path === "string" ? path : void 0;
+}
+function strapiRequestLogger(opts) {
+  const stateKey = opts.stateKey ?? "requestId";
+  return async (ctx, next) => {
+    const incoming = ctx.get("x-request-id");
+    const caller = incoming && REQUEST_ID_RE.test(incoming) ? incoming : void 0;
+    const existing = ctx.state[stateKey];
+    const requestId = typeof existing === "string" && existing ? existing : opts.trustIncomingRequestId && caller ? caller : newRequestId();
+    if (ctx.state[stateKey] === void 0) ctx.state[stateKey] = requestId;
+    ctx.set("X-Request-ID", requestId);
+    const fields = { request_id: requestId };
+    if (caller && caller !== requestId) fields.upstream_request_id = caller;
+    const trace = parseTraceparent(ctx.get("traceparent"));
+    if (trace) Object.assign(fields, trace);
+    const start = performance.now();
+    await runWithStore(fields, async (store) => {
+      let failed = false;
+      try {
+        await next();
+      } catch (err) {
+        failed = true;
+        recordErrorIn(store, err);
+        throw err;
+      } finally {
+        logHttpRequest(
+          opts.log,
+          {
+            method: ctx.method,
+            route: routeOf(ctx),
+            path: ctx.url,
+            status: failed ? 500 : ctx.status,
+            duration_ms: performance.now() - start,
+            err: store.error,
+            fields: store.fields
+          },
+          opts
+        );
+      }
+    });
+  };
+}
+function strapiErrorCapture() {
+  return async (_ctx, next) => {
+    try {
+      await next();
+    } catch (err) {
+      const store = currentStore();
+      if (store) recordErrorIn(store, err);
+      markLogged(err);
+      throw err;
+    }
+  };
+}
+var LEVELS = {
+  error: "error",
+  warn: "warn",
+  info: "info",
+  http: "debug",
+  verbose: "debug",
+  debug: "debug",
+  silly: "trace"
+};
+var META_SKIP = /* @__PURE__ */ new Set(["level", "message", "stack"]);
+function forward(log, info) {
+  if (isErrorLike(info) && isLogged(info)) return;
+  const level = LEVELS[String(info.level)] ?? "info";
+  const fields = {};
+  for (const [key, value] of Object.entries(info)) if (!META_SKIP.has(key)) fields[key] = value;
+  let message = info.message;
+  if (isErrorLike(info)) {
+    fields.err = info;
+  } else if (isErrorLike(message)) {
+    if (isLogged(message)) return;
+    fields.err = message;
+    message = message.message;
+  } else if (typeof info.stack === "string") {
+    fields.err_stack = info.stack;
+  }
+  if ((level === "warn" || level === "error") && fields.event === void 0) fields.event = "strapi.log";
+  log[level](typeof message === "string" ? message : String(message ?? ""), fields);
+}
+function strapiLoggerConfig(log) {
+  const transport = new import_node_stream.Writable({
+    objectMode: true,
+    write(info, _encoding, callback) {
+      try {
+        forward(log, info);
+      } finally {
+        callback();
+      }
+    }
+  });
+  Object.assign(transport, {
+    log(info, callback) {
+      forward(log, info);
+      callback();
+    }
+  });
+  return {
+    level: "silly",
+    // Identity format: replaces Strapi's prettyPrint so the transport receives raw info objects.
+    format: { transform: (info) => info },
+    transports: [transport]
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  strapiErrorCapture,
+  strapiLoggerConfig,
+  strapiRequestLogger
+});
+//# sourceMappingURL=strapi.cjs.map

package/dist/strapi.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/strapi.ts","../src/context.ts","../src/global.ts","../src/redact.ts","../src/error.ts","../src/normalize.ts","../src/request-id.ts","../src/http.ts"],"sourcesContent":["import { Writable } from \"node:stream\";\nimport { currentStore, recordErrorIn, runWithStore } from \"./context\";\nimport { isErrorLike, isLogged, markLogged } from \"./error\";\nimport { logHttpRequest, newRequestId, parseTraceparent, REQUEST_ID_RE, type HttpLogOptions } from \"./http\";\nimport type { Level } from \"./levels\";\nimport type { Logger } from \"./logger\";\nimport type { Fields } from \"./normalize\";\n\n/** The parts of a Koa/Strapi context the middlewares use. */\nexport interface KoaContextLike {\n  method: string;\n  url: string;\n  status: number;\n  state: Record<string, unknown>;\n  get(name: string): string;\n  set(name: string, value: string): void;\n  /** Full matched route template, set by @koa/router (includes router prefixes such as /api). */\n  _matchedRoute?: unknown;\n}\n\nexport type KoaMiddleware = (ctx: KoaContextLike, next: () => Promise<unknown>) => Promise<void>;\n\nexport interface StrapiRequestLoggerOptions extends HttpLogOptions {\n  log: Logger;\n  /**\n   * Use a valid incoming x-request-id as request_id. Off by default: the server issues its own\n   * id (Strapi apps often use it for audit rows) and records the caller's id as\n   * upstream_request_id, which still links the logs of both services.\n   */\n  trustIncomingRequestId?: boolean;\n  /** ctx.state key shared with the app's own correlation middleware. Default \"requestId\". */\n  stateKey?: string;\n}\n\nfunction routeOf(ctx: KoaContextLike): string | undefined {\n  if (typeof ctx._matchedRoute === \"string\") return ctx._matchedRoute;\n  const path = (ctx.state.route as { path?: unknown } | undefined)?.path;\n  return typeof path === \"string\" ? path : undefined;\n}\n\n/**\n * Replaces 'strapi::logger' (put it first in config/middlewares): opens the request context and\n * writes one http.request line per request.\n */\nexport function strapiRequestLogger(opts: StrapiRequestLoggerOptions): KoaMiddleware {\n  const stateKey = opts.stateKey ?? \"requestId\";\n  return async (ctx, next) => {\n    const incoming = ctx.get(\"x-request-id\");\n    const caller = incoming && REQUEST_ID_RE.test(incoming) ? incoming : undefined;\n    const existing = ctx.state[stateKey];\n    const requestId =\n      typeof existing === \"string\" && existing ? existing : opts.trustIncomingRequestId && caller ? caller : newRequestId();\n    // A UUID v4 here is kept by correlation middlewares that only replace invalid ids.\n    if (ctx.state[stateKey] === undefined) ctx.state[stateKey] = requestId;\n    ctx.set(\"X-Request-ID\", requestId);\n\n    const fields: Fields = { request_id: requestId };\n    if (caller && caller !== requestId) fields.upstream_request_id = caller;\n    const trace = parseTraceparent(ctx.get(\"traceparent\"));\n    if (trace) Object.assign(fields, trace);\n\n    const start = performance.now();\n    await runWithStore(fields, async (store) => {\n      let failed = false;\n      try {\n        await next();\n      } catch (err) {\n        // Only reached when no error middleware handled it; Koa answers 500.\n        failed = true;\n        recordErrorIn(store, err);\n        throw err;\n      } finally {\n        logHttpRequest(\n          opts.log,\n          {\n            method: ctx.method,\n            route: routeOf(ctx),\n            path: ctx.url,\n            status: failed ? 500 : ctx.status,\n            duration_ms: performance.now() - start,\n            err: store.error,\n            fields: store.fields,\n          },\n          opts,\n        );\n      }\n    });\n  };\n}\n\n/**\n * Put right after 'strapi::errors'. Records thrown errors on the request's http.request line and\n * marks them, so the copy strapi::errors logs through strapi.log.error is not written twice.\n */\nexport function strapiErrorCapture(): KoaMiddleware {\n  return async (_ctx, next) => {\n    try {\n      await next();\n    } catch (err) {\n      const store = currentStore();\n      if (store) recordErrorIn(store, err);\n      markLogged(err);\n      throw err;\n    }\n  };\n}\n\nconst LEVELS: Record<string, Level> = {\n  error: \"error\",\n  warn: \"warn\",\n  info: \"info\",\n  http: \"debug\",\n  verbose: \"debug\",\n  debug: \"debug\",\n  silly: \"trace\",\n};\n\nconst META_SKIP = new Set([\"level\", \"message\", \"stack\"]);\n\nfunction forward(log: Logger, info: Record<string, unknown>): void {\n  // Already carried by the request's http.request line (see strapiErrorCapture).\n  if (isErrorLike(info) && isLogged(info)) return;\n  const level = LEVELS[String(info.level)] ?? \"info\";\n  const fields: Fields = {};\n  for (const [key, value] of Object.entries(info)) if (!META_SKIP.has(key)) fields[key] = value;\n\n  let message: unknown = info.message;\n  if (isErrorLike(info)) {\n    fields.err = info;\n  } else if (isErrorLike(message)) {\n    if (isLogged(message)) return;\n    fields.err = message;\n    message = message.message;\n  } else if (typeof info.stack === \"string\") {\n    fields.err_stack = info.stack;\n  }\n  if ((level === \"warn\" || level === \"error\") && fields.event === undefined) fields.event = \"strapi.log\";\n  log[level](typeof message === \"string\" ? message : String(message ?? \"\"), fields);\n}\n\n/**\n * Winston configuration for Strapi's config/logger.ts: every strapi.log.* call (app code and\n * framework) becomes a contract JSON line with the request context. Level filtering is left to\n * the logger (LOG_LEVEL).\n */\nexport function strapiLoggerConfig(log: Logger) {\n  const transport = new Writable({\n    objectMode: true,\n    write(info: Record<string, unknown>, _encoding, callback) {\n      try {\n        forward(log, info);\n      } finally {\n        callback();\n      }\n    },\n  });\n  // winston requires a `log(info, callback)` method on stream transports; writes go through write().\n  Object.assign(transport, {\n    log(info: Record<string, unknown>, callback: () => void) {\n      forward(log, info);\n      callback();\n    },\n  });\n  return {\n    level: \"silly\",\n    // Identity format: replaces Strapi's prettyPrint so the transport receives raw info objects.\n    format: { transform: <T>(info: T): T => info },\n    transports: [transport],\n  };\n}\n","import { AsyncLocalStorage } from \"node:async_hooks\";\nimport { globalSingleton } from \"./global\";\nimport type { Fields } from \"./normalize\";\n\nexport interface ContextStore {\n  fields: Fields;\n  error?: unknown;\n  /** Route template captured while the router still knew it (Express error path). */\n  route?: string;\n  parent?: ContextStore;\n}\n\nconst als = globalSingleton(\"als\", () => new AsyncLocalStorage<ContextStore>());\n\nexport const STORE_KEY: symbol = Symbol.for(\"@tanngo11/log.store\");\n\nexport function runWithStore<T>(fields: Fields, fn: (store: ContextStore) => T): T {\n  const parent = als.getStore();\n  const store: ContextStore = { fields: { ...parent?.fields, ...fields }, parent };\n  return als.run(store, () => fn(store));\n}\n\nexport function withContext<T>(fields: Fields, fn: () => T): T {\n  return runWithStore(fields, () => fn());\n}\n\nexport function currentStore(): ContextStore | undefined {\n  return als.getStore();\n}\n\nexport function getContext(): Fields {\n  return als.getStore()?.fields ?? {};\n}\n\n// Applies to the current context and every enclosing one, so a field added inside a nested\n// withContext/runJob still reaches the request's http.request line.\nexport function addContext(fields: Fields): void {\n  for (let s = als.getStore(); s; s = s.parent) Object.assign(s.fields, fields);\n}\n\n// Sets the error on the store and on enclosing stores that have none yet.\nexport function recordErrorIn(store: ContextStore, err: unknown): void {\n  store.error = err;\n  for (let s = store.parent; s; s = s.parent) if (s.error === undefined) s.error = err;\n}\n\n// Marks the error that the current request/job summary line should carry. Does not write a line.\nexport function recordError(err: unknown): void {\n  const store = als.getStore();\n  if (store) recordErrorIn(store, err);\n}\n\nexport function attachStore(target: object, store: ContextStore): void {\n  (target as Record<symbol, ContextStore>)[STORE_KEY] = store;\n}\n\nexport function storeOf(target: unknown): ContextStore | undefined {\n  if (typeof target !== \"object\" || target === null) return undefined;\n  return (target as Record<symbol, ContextStore | undefined>)[STORE_KEY];\n}\n","// Singletons shared by every copy of this package loaded in the process (ESM and CJS builds,\n// or duplicated installs), so context and dedupe state never split.\nexport function globalSingleton<T>(name: string, make: () => T): T {\n  const key = Symbol.for(`@tanngo11/log.${name}`);\n  const g = globalThis as unknown as Record<symbol, T | undefined>;\n  let value = g[key];\n  if (value === undefined) {\n    value = make();\n    g[key] = value;\n  }\n  return value;\n}\n","// Redaction shared by the logger and the error serializer. The collector redacts again,\n// but it cannot see secrets inside JSON-encoded strings, so the app side must catch them.\n\nexport const DEFAULT_REDACT_KEYS = [\n  \"password\", \"passwd\", \"pwd\", \"passphrase\", \"secret\", \"client_secret\",\n  \"token\", \"access_token\", \"refresh_token\", \"id_token\", \"auth_token\",\n  \"api_key\", \"apikey\", \"access_key\", \"secret_key\", \"private_key\",\n  \"authorization\", \"cookie\", \"set_cookie\", \"session_id\", \"sessionid\",\n  \"credential\", \"credentials\", \"dsn\", \"connection_string\", \"conn_string\", \"jwt\", \"bearer\",\n];\n\n/** Opt-in value patterns for `redactValues`. Not on by default: they can hit ordinary numbers. */\nexport const REDACT_PATTERNS = {\n  /** Vietnamese mobile numbers: 0912345678, +84912345678, 84912345678. */\n  phoneVN: /(?<![\\d+])(?:\\+?84|0)[35789]\\d{8}(?!\\d)/g,\n  /** Visa, Mastercard, Amex, Discover-like card numbers, with optional spaces or dashes. */\n  paymentCard: /(?<!\\d)(?:4\\d{3}|5[1-5]\\d{2}|2[2-7]\\d{2}|3[47]\\d{2}|6(?:011|5\\d{2}))(?:[ -]?\\d{4}){2}[ -]?\\d{1,4}(?!\\d)/g,\n  /** IPv4 addresses. */\n  ipv4: /(?<![\\d.])(?:\\d{1,3}\\.){3}\\d{1,3}(?![\\d.])/g,\n} as const;\n\n// Keys that only describe a secret (count, type, timestamps, flags) stay readable.\nconst SAFE_SUFFIXES = [\"_count\", \"_type\", \"_length\", \"_expires_at\", \"_expires_in\", \"_ttl\", \"_at\", \"_ms\", \"_enabled\"];\n\nexport const REDACTED = \"[REDACTED]\";\n\nexport function toSnakeCase(key: string): string {\n  return key\n    .replace(/([a-z0-9])([A-Z])/g, \"$1_$2\")\n    .replace(/([A-Z]+)([A-Z][a-z])/g, \"$1_$2\")\n    .replace(/[^A-Za-z0-9_]+/g, \"_\")\n    .toLowerCase();\n}\n\nconst URL_CREDENTIALS_RE = /([a-z][a-z0-9+.-]*:\\/\\/)[^\\s/@:\"']+:[^\\s/@\"']+@/gi;\nconst BEARER_RE = /\\bBearer\\s+[A-Za-z0-9._~+/=-]+/gi;\nconst JWT_RE = /\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+/g;\nconst EMAIL_RE = /[A-Za-z0-9._%+-]+@([A-Za-z0-9-]+(?:\\.[A-Za-z0-9-]+)*\\.[A-Za-z]{2,})/g;\n\nexport type KeyPattern = string | RegExp;\n\nexport interface RedactorOptions {\n  /** Extra sensitive keys: names (matched like the defaults) or patterns tested on the snake_case key. */\n  keys?: readonly KeyPattern[];\n  /** Extra value patterns; every match inside any string becomes [REDACTED]. */\n  values?: readonly RegExp[];\n}\n\nexport interface Redactor {\n  isSensitive(key: string): boolean;\n  /** Masks secrets and emails that appear inside free text. */\n  scrub(s: string): string;\n  /** JSON.stringify that redacts sensitive keys at any depth and never throws. */\n  json(value: unknown): string;\n}\n\nfunction globalize(re: RegExp): RegExp {\n  return re.flags.includes(\"g\") ? new RegExp(re.source, re.flags) : new RegExp(re.source, `${re.flags}g`);\n}\n\nexport function createRedactor(opts: RedactorOptions = {}): Redactor {\n  const words = [...DEFAULT_REDACT_KEYS];\n  const keyPatterns: RegExp[] = [];\n  for (const k of opts.keys ?? []) {\n    if (typeof k === \"string\") words.push(toSnakeCase(k));\n    else keyPatterns.push(new RegExp(k.source, k.flags.replace(\"g\", \"\")));\n  }\n  const valuePatterns = (opts.values ?? []).map(globalize);\n\n  const isSensitive = (key: string): boolean => {\n    const k = toSnakeCase(key);\n    if (keyPatterns.some((re) => re.test(k))) return true;\n    if (!words.includes(k) && SAFE_SUFFIXES.some((s) => k.endsWith(s))) return false;\n    return words.some((w) => k === w || k.startsWith(`${w}_`) || k.endsWith(`_${w}`) || k.includes(`_${w}_`));\n  };\n\n  const scrub = (s: string): string => {\n    let out = s\n      .replace(URL_CREDENTIALS_RE, `$1${REDACTED}@`)\n      .replace(BEARER_RE, `Bearer ${REDACTED}`)\n      .replace(JWT_RE, \"[REDACTED_JWT]\")\n      .replace(EMAIL_RE, \"***@$1\");\n    for (const re of valuePatterns) out = out.replace(re, REDACTED);\n    return out;\n  };\n\n  const json = (value: unknown): string => {\n    if (typeof value === \"string\") return value;\n    try {\n      const text = JSON.stringify(value, (key, val: unknown) => {\n        if (key && val !== null && val !== undefined && isSensitive(key)) return REDACTED;\n        if (typeof val === \"bigint\") return val.toString();\n        if (val instanceof Error) return { name: val.name, message: val.message };\n        return val;\n      });\n      return text ?? String(value);\n    } catch {\n      return String(value);\n    }\n  };\n\n  return { isSensitive, scrub, json };\n}\n\nexport const defaultRedactor: Redactor = createRedactor();\n","import { globalSingleton } from \"./global\";\nimport { defaultRedactor } from \"./redact\";\n\nexport interface ErrFields {\n  err_type?: string;\n  err_message?: string;\n  err_code?: string;\n  err_stack?: string;\n  err_cause?: string;\n}\n\nconst MAX_CAUSE_DEPTH = 5;\n\nexport function isErrorLike(v: unknown): v is Error {\n  if (v instanceof Error) return true;\n  return (\n    typeof v === \"object\" &&\n    v !== null &&\n    typeof (v as { message?: unknown }).message === \"string\" &&\n    (\"stack\" in v || \"name\" in v)\n  );\n}\n\nfunction errorType(e: Error): string {\n  if (e.name && e.name !== \"Error\") return e.name;\n  const ctor = (e as { constructor?: { name?: string } }).constructor?.name;\n  return ctor && ctor !== \"Object\" ? ctor : \"Error\";\n}\n\nexport function serializeError(err: unknown): ErrFields {\n  if (!isErrorLike(err)) {\n    if (typeof err === \"string\") return { err_type: \"string\", err_message: err };\n    return { err_type: typeof err, err_message: defaultRedactor.json(err) };\n  }\n  const e = err as Error & { code?: unknown; cause?: unknown };\n  const out: ErrFields = { err_type: errorType(e), err_message: String(e.message ?? \"\") };\n  if (e.code !== undefined && e.code !== null) out.err_code = String(e.code);\n  if (typeof e.stack === \"string\") out.err_stack = e.stack;\n\n  const causes: string[] = [];\n  let cause = e.cause;\n  while (cause !== undefined && cause !== null && causes.length < MAX_CAUSE_DEPTH) {\n    if (isErrorLike(cause)) {\n      causes.push(`${errorType(cause)}: ${cause.message}`);\n      cause = (cause as { cause?: unknown }).cause;\n    } else {\n      causes.push(defaultRedactor.json(cause));\n      cause = undefined;\n    }\n  }\n  if (causes.length > 0) out.err_cause = causes.join(\" <- \");\n  return out;\n}\n\nconst logged = globalSingleton(\"logged\", () => new WeakSet<object>());\n\n// Marks an error as already written, so a later boundary (e.g. Next's onRequestError)\n// does not log it a second time.\nexport function markLogged(err: unknown): void {\n  if (typeof err === \"object\" && err !== null) logged.add(err);\n}\n\nexport function isLogged(err: unknown): boolean {\n  return typeof err === \"object\" && err !== null && logged.has(err);\n}\n","import { isErrorLike, serializeError } from \"./error\";\nimport type { Level } from \"./levels\";\nimport { REDACTED, toSnakeCase, type Redactor } from \"./redact\";\n\nexport { DEFAULT_REDACT_KEYS, toSnakeCase } from \"./redact\";\n\n/** Final per-field hook: return a replacement, or undefined to drop the field. */\nexport type RedactHook = (key: string, value: Primitive) => unknown;\n\nexport type Fields = Record<string, unknown>;\nexport type Primitive = string | number | boolean | null;\nexport type LogRecord = Record<string, Primitive>;\n\nexport interface NormalizeOptions {\n  snakeCase: boolean;\n  redactor: Redactor;\n  hook?: RedactHook;\n}\n\n// Fields the redact hook never sees, so every line keeps its level, message and event.\nconst HOOK_EXEMPT = new Set([\"level\", \"message\", \"event\"]);\n\n// Keys owned by Vector (overwritten or deleted on ingest) or by the logger itself.\nexport const RESERVED_KEYS = new Set([\n  \"project\", \"service\", \"vps\", \"version\", \"container_name\", \"container_id\", \"image\", \"stream\",\n  \"_timestamp\", \"label\", \"host\", \"source_type\", \"msg\", \"lvl\", \"severity\", \"level\", \"message\",\n]);\n\nexport const MAX_LINE_BYTES = 16000;\nconst MAX_MESSAGE = 500;\nconst MAX_STACK = 4000;\nconst MAX_STRING = 1000;\nconst MAX_DEPTH = 3;\nconst TRUNCATED = \"…[truncated]\";\n\n// Fields kept when a line is too large.\nconst KEEP_ON_SHRINK = new Set([\n  \"level\", \"message\", \"event\", \"request_id\", \"trace_id\", \"span_id\", \"job_name\", \"job_id\", \"job_attempt\",\n  \"user_id\", \"tenant_id\", \"err_type\", \"err_message\", \"err_code\",\n]);\n\nexport function stripUrl(url: string): string {\n  const noQuery = url.split(/[?#]/, 1)[0] ?? \"\";\n  return noQuery.replace(/^([a-z][a-z0-9+.-]*:\\/\\/)[^/@\\s]*@/i, \"$1\");\n}\n\nexport function truncate(s: string, max: number): string {\n  return s.length > max ? s.slice(0, max - TRUNCATED.length) + TRUNCATED : s;\n}\n\nfunction isPlainObject(v: unknown): v is Fields {\n  if (typeof v !== \"object\" || v === null) return false;\n  const proto = Object.getPrototypeOf(v);\n  return proto === Object.prototype || proto === null;\n}\n\nfunction isUrlKey(key: string): boolean {\n  return key === \"http_path\" || key === \"http_url\" || key.endsWith(\"_url\");\n}\n\nfunction flattenInto(out: LogRecord, prefix: string, obj: Fields, depth: number, opts: NormalizeOptions): void {\n  for (const [rawKey, value] of Object.entries(obj)) {\n    const key = opts.snakeCase ? toSnakeCase(rawKey) : rawKey;\n    const full = prefix ? `${prefix}_${key}` : key;\n    if (value === undefined || typeof value === \"function\" || typeof value === \"symbol\") continue;\n    if (value !== null && (opts.redactor.isSensitive(rawKey) || opts.redactor.isSensitive(full))) {\n      out[full] = REDACTED;\n      continue;\n    }\n    if (value === null || typeof value === \"string\" || typeof value === \"boolean\") {\n      out[full] = value;\n    } else if (typeof value === \"number\") {\n      out[full] = Number.isFinite(value) ? value : String(value);\n    } else if (typeof value === \"bigint\") {\n      out[full] = value.toString();\n    } else if (value instanceof Date) {\n      out[full] = Number.isNaN(value.getTime()) ? \"Invalid Date\" : value.toISOString();\n    } else if (isErrorLike(value)) {\n      out[full] = `${value.name}: ${value.message}`;\n    } else if (isPlainObject(value) && depth < MAX_DEPTH - 1) {\n      flattenInto(out, full, value, depth + 1, opts);\n    } else {\n      // Arrays, deep objects, class instances: stringified with sensitive keys redacted.\n      out[full] = opts.redactor.json(value);\n    }\n  }\n}\n\nfunction finalize(key: string, value: Primitive, opts: NormalizeOptions): Primitive {\n  if (typeof value !== \"string\") return value;\n  const v = opts.redactor.scrub(isUrlKey(key) ? stripUrl(value) : value);\n  return truncate(v, key === \"err_stack\" ? MAX_STACK : MAX_STRING);\n}\n\nexport function buildRecord(\n  level: Level,\n  message: unknown,\n  sources: (Fields | undefined)[],\n  opts: NormalizeOptions,\n): LogRecord {\n  const merged: Fields = {};\n  for (const source of sources) if (source) Object.assign(merged, source);\n\n  let err: unknown;\n  if (merged.err !== undefined && merged.err !== null) {\n    err = merged.err;\n    delete merged.err;\n  } else if (isErrorLike(merged.error)) {\n    err = merged.error;\n    delete merged.error;\n  }\n\n  const flat: LogRecord = {};\n  flattenInto(flat, \"\", merged, 0, opts);\n  if (err !== undefined) Object.assign(flat, serializeError(err));\n\n  const text = typeof message === \"string\" ? message : opts.redactor.json(message);\n  const out: LogRecord = { level, message: truncate(opts.redactor.scrub(text), MAX_MESSAGE) };\n  for (const [k, v] of Object.entries(flat)) {\n    const key = RESERVED_KEYS.has(k) ? `app_${k}` : k;\n    let value = finalize(key, v, opts);\n    if (opts.hook && !HOOK_EXEMPT.has(key)) {\n      const replaced = opts.hook(key, value);\n      if (replaced === undefined) continue;\n      value = typeof replaced === \"object\" && replaced !== null ? opts.redactor.json(replaced) : (replaced as Primitive);\n    }\n    out[key] = value;\n  }\n  return out;\n}\n\nfunction byteLength(s: string): number {\n  // UTF-8 uses at most 3 bytes per UTF-16 code unit: skip encoding short lines.\n  if (s.length * 3 <= MAX_LINE_BYTES) return s.length;\n  return new TextEncoder().encode(s).length;\n}\n\nexport function serializeRecord(record: LogRecord): string {\n  const line = JSON.stringify(record);\n  if (byteLength(line) <= MAX_LINE_BYTES) return line;\n  const small: LogRecord = {};\n  for (const [k, v] of Object.entries(record)) {\n    if (KEEP_ON_SHRINK.has(k) || k.startsWith(\"http_\")) small[k] = v;\n  }\n  small.log_truncated = true;\n  return JSON.stringify(small);\n}\n","// No imports: this module is shared with the edge entry (next-edge).\nexport const REQUEST_ID_RE = /^[A-Za-z0-9._-]{1,64}$/;\nconst TRACEPARENT_RE = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/;\n\nexport function newRequestId(): string {\n  return globalThis.crypto.randomUUID();\n}\n\nfunction first(header?: string | string[] | null): string | undefined {\n  return Array.isArray(header) ? header[0] : (header ?? undefined);\n}\n\nexport function resolveRequestId(header?: string | string[] | null): string {\n  const value = first(header);\n  return value && REQUEST_ID_RE.test(value) ? value : newRequestId();\n}\n\nexport function parseTraceparent(header?: string | string[] | null): { trace_id: string; span_id: string } | undefined {\n  const value = first(header)?.trim().toLowerCase();\n  const m = value ? TRACEPARENT_RE.exec(value) : null;\n  if (!m) return undefined;\n  const [, version, traceId, spanId] = m as unknown as [string, string, string, string];\n  if (version === \"ff\" || /^0+$/.test(traceId) || /^0+$/.test(spanId)) return undefined;\n  return { trace_id: traceId, span_id: spanId };\n}\n","import { getContext } from \"./context\";\nimport { markLogged, serializeError } from \"./error\";\nimport type { Logger } from \"./logger\";\nimport { stripUrl, type Fields } from \"./normalize\";\nimport { parseTraceparent, resolveRequestId } from \"./request-id\";\n\nexport { newRequestId, parseTraceparent, REQUEST_ID_RE, resolveRequestId } from \"./request-id\";\n\nexport type HeaderSource = Headers | Record<string, string | string[] | undefined>;\n\nfunction header(headers: HeaderSource, name: string): string | string[] | undefined {\n  if (typeof (headers as Headers).get === \"function\") return (headers as Headers).get(name) ?? undefined;\n  return (headers as Record<string, string | string[] | undefined>)[name];\n}\n\nexport function requestContextFields(headers: HeaderSource): { request_id: string; trace_id?: string; span_id?: string } {\n  const out: { request_id: string; trace_id?: string; span_id?: string } = {\n    request_id: resolveRequestId(header(headers, \"x-request-id\")),\n  };\n  const tp = parseTraceparent(header(headers, \"traceparent\"));\n  if (tp) Object.assign(out, tp);\n  return out;\n}\n\n// Headers to forward to services we own, so their logs share request_id / trace_id.\nexport function propagationHeaders(): Record<string, string> {\n  const ctx = getContext();\n  const out: Record<string, string> = {};\n  if (typeof ctx.request_id === \"string\") out[\"x-request-id\"] = ctx.request_id;\n  if (typeof ctx.trace_id === \"string\" && typeof ctx.span_id === \"string\") {\n    out.traceparent = `00-${ctx.trace_id}-${ctx.span_id}-01`;\n  }\n  return out;\n}\n\nexport const DEFAULT_SKIP_PATHS: (string | RegExp)[] = [\n  /^\\/(health|healthz|ready|readyz|livez)\\/?$/,\n  \"/favicon.ico\",\n  /^\\/_next\\/static\\//,\n];\n\nexport interface HttpLogOptions {\n  skipPaths?: (string | RegExp)[];\n}\n\nexport interface HttpRequestInfo {\n  method: string;\n  route?: string;\n  path: string;\n  status: number;\n  duration_ms?: number;\n  err?: unknown;\n  fields?: Fields;\n}\n\nexport function shouldSkip(method: string, path: string, skipPaths: (string | RegExp)[] = DEFAULT_SKIP_PATHS): boolean {\n  if (method.toUpperCase() === \"OPTIONS\") return true;\n  const p = stripUrl(path);\n  return skipPaths.some((s) => (typeof s === \"string\" ? p === s : s.test(p)));\n}\n\n// Writes the one `http.request` summary line for an inbound request.\nexport function logHttpRequest(log: Logger, info: HttpRequestInfo, opts: HttpLogOptions = {}): void {\n  if (shouldSkip(info.method, info.path, opts.skipPaths)) return;\n  const level = info.status >= 500 ? \"error\" : info.status >= 400 ? \"warn\" : \"info\";\n  const path = stripUrl(info.path);\n  const errFields: Fields = {};\n  if (info.err !== undefined && info.err !== null) {\n    Object.assign(errFields, serializeError(info.err));\n    if (info.status < 500) delete errFields.err_stack;\n    markLogged(info.err);\n  }\n  // Route templates keep the message bounded; the raw path would make one message per URL.\n  const message = info.route ? `${info.method} ${info.route} ${info.status}` : `${info.method} ${info.status}`;\n  log[level](message, {\n    ...info.fields,\n    event: \"http.request\",\n    http_method: info.method,\n    http_route: info.route,\n    http_path: path,\n    http_status: info.status,\n    duration_ms: info.duration_ms === undefined ? undefined : Math.round(info.duration_ms),\n    ...errFields,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAyB;;;ACAzB,8BAAkC;;;ACE3B,SAAS,gBAAmB,MAAc,MAAkB;AACjE,QAAM,MAAM,uBAAO,IAAI,iBAAiB,IAAI,EAAE;AAC9C,QAAM,IAAI;AACV,MAAI,QAAQ,EAAE,GAAG;AACjB,MAAI,UAAU,QAAW;AACvB,YAAQ,KAAK;AACb,MAAE,GAAG,IAAI;AAAA,EACX;AACA,SAAO;AACT;;;ADCA,IAAM,MAAM,gBAAgB,OAAO,MAAM,IAAI,0CAAgC,CAAC;AAIvE,SAAS,aAAgB,QAAgB,IAAmC;AACjF,QAAM,SAAS,IAAI,SAAS;AAC5B,QAAM,QAAsB,EAAE,QAAQ,EAAE,GAAG,QAAQ,QAAQ,GAAG,OAAO,GAAG,OAAO;AAC/E,SAAO,IAAI,IAAI,OAAO,MAAM,GAAG,KAAK,CAAC;AACvC;AAMO,SAAS,eAAyC;AACvD,SAAO,IAAI,SAAS;AACtB;AAaO,SAAS,cAAc,OAAqB,KAAoB;AACrE,QAAM,QAAQ;AACd,WAAS,IAAI,MAAM,QAAQ,GAAG,IAAI,EAAE,OAAQ,KAAI,EAAE,UAAU,OAAW,GAAE,QAAQ;AACnF;;;AEzCO,IAAM,sBAAsB;AAAA,EACjC;AAAA,EAAY;AAAA,EAAU;AAAA,EAAO;AAAA,EAAc;AAAA,EAAU;AAAA,EACrD;AAAA,EAAS;AAAA,EAAgB;AAAA,EAAiB;AAAA,EAAY;AAAA,EACtD;AAAA,EAAW;AAAA,EAAU;AAAA,EAAc;AAAA,EAAc;AAAA,EACjD;AAAA,EAAiB;AAAA,EAAU;AAAA,EAAc;AAAA,EAAc;AAAA,EACvD;AAAA,EAAc;AAAA,EAAe;AAAA,EAAO;AAAA,EAAqB;AAAA,EAAe;AAAA,EAAO;AACjF;AAaA,IAAM,gBAAgB,CAAC,UAAU,SAAS,WAAW,eAAe,eAAe,QAAQ,OAAO,OAAO,UAAU;AAE5G,IAAM,WAAW;AAEjB,SAAS,YAAY,KAAqB;AAC/C,SAAO,IACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,yBAAyB,OAAO,EACxC,QAAQ,mBAAmB,GAAG,EAC9B,YAAY;AACjB;AAEA,IAAM,qBAAqB;AAC3B,IAAM,YAAY;AAClB,IAAM,SAAS;AACf,IAAM,WAAW;AAmBjB,SAAS,UAAU,IAAoB;AACrC,SAAO,GAAG,MAAM,SAAS,GAAG,IAAI,IAAI,OAAO,GAAG,QAAQ,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,QAAQ,GAAG,GAAG,KAAK,GAAG;AACxG;AAEO,SAAS,eAAe,OAAwB,CAAC,GAAa;AACnE,QAAM,QAAQ,CAAC,GAAG,mBAAmB;AACrC,QAAM,cAAwB,CAAC;AAC/B,aAAW,KAAK,KAAK,QAAQ,CAAC,GAAG;AAC/B,QAAI,OAAO,MAAM,SAAU,OAAM,KAAK,YAAY,CAAC,CAAC;AAAA,QAC/C,aAAY,KAAK,IAAI,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,KAAK,EAAE,CAAC,CAAC;AAAA,EACtE;AACA,QAAM,iBAAiB,KAAK,UAAU,CAAC,GAAG,IAAI,SAAS;AAEvD,QAAM,cAAc,CAAC,QAAyB;AAC5C,UAAM,IAAI,YAAY,GAAG;AACzB,QAAI,YAAY,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,EAAG,QAAO;AACjD,QAAI,CAAC,MAAM,SAAS,CAAC,KAAK,cAAc,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAG,QAAO;AAC3E,WAAO,MAAM,KAAK,CAAC,MAAM,MAAM,KAAK,EAAE,WAAW,GAAG,CAAC,GAAG,KAAK,EAAE,SAAS,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,GAAG,CAAC;AAAA,EAC1G;AAEA,QAAM,QAAQ,CAAC,MAAsB;AACnC,QAAI,MAAM,EACP,QAAQ,oBAAoB,KAAK,QAAQ,GAAG,EAC5C,QAAQ,WAAW,UAAU,QAAQ,EAAE,EACvC,QAAQ,QAAQ,gBAAgB,EAChC,QAAQ,UAAU,QAAQ;AAC7B,eAAW,MAAM,cAAe,OAAM,IAAI,QAAQ,IAAI,QAAQ;AAC9D,WAAO;AAAA,EACT;AAEA,QAAM,OAAO,CAAC,UAA2B;AACvC,QAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAI;AACF,YAAM,OAAO,KAAK,UAAU,OAAO,CAAC,KAAK,QAAiB;AACxD,YAAI,OAAO,QAAQ,QAAQ,QAAQ,UAAa,YAAY,GAAG,EAAG,QAAO;AACzE,YAAI,OAAO,QAAQ,SAAU,QAAO,IAAI,SAAS;AACjD,YAAI,eAAe,MAAO,QAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ;AACxE,eAAO;AAAA,MACT,CAAC;AACD,aAAO,QAAQ,OAAO,KAAK;AAAA,IAC7B,QAAQ;AACN,aAAO,OAAO,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,SAAO,EAAE,aAAa,OAAO,KAAK;AACpC;AAEO,IAAM,kBAA4B,eAAe;;;AC7FxD,IAAM,kBAAkB;AAEjB,SAAS,YAAY,GAAwB;AAClD,MAAI,aAAa,MAAO,QAAO;AAC/B,SACE,OAAO,MAAM,YACb,MAAM,QACN,OAAQ,EAA4B,YAAY,aAC/C,WAAW,KAAK,UAAU;AAE/B;AAEA,SAAS,UAAU,GAAkB;AACnC,MAAI,EAAE,QAAQ,EAAE,SAAS,QAAS,QAAO,EAAE;AAC3C,QAAM,OAAQ,EAA0C,aAAa;AACrE,SAAO,QAAQ,SAAS,WAAW,OAAO;AAC5C;AAEO,SAAS,eAAe,KAAyB;AACtD,MAAI,CAAC,YAAY,GAAG,GAAG;AACrB,QAAI,OAAO,QAAQ,SAAU,QAAO,EAAE,UAAU,UAAU,aAAa,IAAI;AAC3E,WAAO,EAAE,UAAU,OAAO,KAAK,aAAa,gBAAgB,KAAK,GAAG,EAAE;AAAA,EACxE;AACA,QAAM,IAAI;AACV,QAAM,MAAiB,EAAE,UAAU,UAAU,CAAC,GAAG,aAAa,OAAO,EAAE,WAAW,EAAE,EAAE;AACtF,MAAI,EAAE,SAAS,UAAa,EAAE,SAAS,KAAM,KAAI,WAAW,OAAO,EAAE,IAAI;AACzE,MAAI,OAAO,EAAE,UAAU,SAAU,KAAI,YAAY,EAAE;AAEnD,QAAM,SAAmB,CAAC;AAC1B,MAAI,QAAQ,EAAE;AACd,SAAO,UAAU,UAAa,UAAU,QAAQ,OAAO,SAAS,iBAAiB;AAC/E,QAAI,YAAY,KAAK,GAAG;AACtB,aAAO,KAAK,GAAG,UAAU,KAAK,CAAC,KAAK,MAAM,OAAO,EAAE;AACnD,cAAS,MAA8B;AAAA,IACzC,OAAO;AACL,aAAO,KAAK,gBAAgB,KAAK,KAAK,CAAC;AACvC,cAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,OAAO,SAAS,EAAG,KAAI,YAAY,OAAO,KAAK,MAAM;AACzD,SAAO;AACT;AAEA,IAAM,SAAS,gBAAgB,UAAU,MAAM,oBAAI,QAAgB,CAAC;AAI7D,SAAS,WAAW,KAAoB;AAC7C,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO,IAAI,GAAG;AAC7D;AAEO,SAAS,SAAS,KAAuB;AAC9C,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,OAAO,IAAI,GAAG;AAClE;;;ACvBO,SAAS,SAAS,KAAqB;AAC5C,QAAM,UAAU,IAAI,MAAM,QAAQ,CAAC,EAAE,CAAC,KAAK;AAC3C,SAAO,QAAQ,QAAQ,uCAAuC,IAAI;AACpE;;;AC3CO,IAAM,gBAAgB;AAC7B,IAAM,iBAAiB;AAEhB,SAAS,eAAuB;AACrC,SAAO,WAAW,OAAO,WAAW;AACtC;AAEA,SAAS,MAAM,QAAuD;AACpE,SAAO,MAAM,QAAQ,MAAM,IAAI,OAAO,CAAC,IAAK,UAAU;AACxD;AAOO,SAAS,iBAAiB,QAAsF;AACrH,QAAM,QAAQ,MAAM,MAAM,GAAG,KAAK,EAAE,YAAY;AAChD,QAAM,IAAI,QAAQ,eAAe,KAAK,KAAK,IAAI;AAC/C,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,CAAC,EAAE,SAAS,SAAS,MAAM,IAAI;AACrC,MAAI,YAAY,QAAQ,OAAO,KAAK,OAAO,KAAK,OAAO,KAAK,MAAM,EAAG,QAAO;AAC5E,SAAO,EAAE,UAAU,SAAS,SAAS,OAAO;AAC9C;;;ACWO,IAAM,qBAA0C;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AACF;AAgBO,SAAS,WAAW,QAAgB,MAAc,YAAiC,oBAA6B;AACrH,MAAI,OAAO,YAAY,MAAM,UAAW,QAAO;AAC/C,QAAM,IAAI,SAAS,IAAI;AACvB,SAAO,UAAU,KAAK,CAAC,MAAO,OAAO,MAAM,WAAW,MAAM,IAAI,EAAE,KAAK,CAAC,CAAE;AAC5E;AAGO,SAAS,eAAe,KAAa,MAAuB,OAAuB,CAAC,GAAS;AAClG,MAAI,WAAW,KAAK,QAAQ,KAAK,MAAM,KAAK,SAAS,EAAG;AACxD,QAAM,QAAQ,KAAK,UAAU,MAAM,UAAU,KAAK,UAAU,MAAM,SAAS;AAC3E,QAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,QAAM,YAAoB,CAAC;AAC3B,MAAI,KAAK,QAAQ,UAAa,KAAK,QAAQ,MAAM;AAC/C,WAAO,OAAO,WAAW,eAAe,KAAK,GAAG,CAAC;AACjD,QAAI,KAAK,SAAS,IAAK,QAAO,UAAU;AACxC,eAAW,KAAK,GAAG;AAAA,EACrB;AAEA,QAAM,UAAU,KAAK,QAAQ,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,KAAK,MAAM,IAAI,KAAK,MAAM;AAC1G,MAAI,KAAK,EAAE,SAAS;AAAA,IAClB,GAAG,KAAK;AAAA,IACR,OAAO;AAAA,IACP,aAAa,KAAK;AAAA,IAClB,YAAY,KAAK;AAAA,IACjB,WAAW;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK,gBAAgB,SAAY,SAAY,KAAK,MAAM,KAAK,WAAW;AAAA,IACrF,GAAG;AAAA,EACL,CAAC;AACH;;;APlDA,SAAS,QAAQ,KAAyC;AACxD,MAAI,OAAO,IAAI,kBAAkB,SAAU,QAAO,IAAI;AACtD,QAAM,OAAQ,IAAI,MAAM,OAA0C;AAClE,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAMO,SAAS,oBAAoB,MAAiD;AACnF,QAAM,WAAW,KAAK,YAAY;AAClC,SAAO,OAAO,KAAK,SAAS;AAC1B,UAAM,WAAW,IAAI,IAAI,cAAc;AACvC,UAAM,SAAS,YAAY,cAAc,KAAK,QAAQ,IAAI,WAAW;AACrE,UAAM,WAAW,IAAI,MAAM,QAAQ;AACnC,UAAM,YACJ,OAAO,aAAa,YAAY,WAAW,WAAW,KAAK,0BAA0B,SAAS,SAAS,aAAa;AAEtH,QAAI,IAAI,MAAM,QAAQ,MAAM,OAAW,KAAI,MAAM,QAAQ,IAAI;AAC7D,QAAI,IAAI,gBAAgB,SAAS;AAEjC,UAAM,SAAiB,EAAE,YAAY,UAAU;AAC/C,QAAI,UAAU,WAAW,UAAW,QAAO,sBAAsB;AACjE,UAAM,QAAQ,iBAAiB,IAAI,IAAI,aAAa,CAAC;AACrD,QAAI,MAAO,QAAO,OAAO,QAAQ,KAAK;AAEtC,UAAM,QAAQ,YAAY,IAAI;AAC9B,UAAM,aAAa,QAAQ,OAAO,UAAU;AAC1C,UAAI,SAAS;AACb,UAAI;AACF,cAAM,KAAK;AAAA,MACb,SAAS,KAAK;AAEZ,iBAAS;AACT,sBAAc,OAAO,GAAG;AACxB,cAAM;AAAA,MACR,UAAE;AACA;AAAA,UACE,KAAK;AAAA,UACL;AAAA,YACE,QAAQ,IAAI;AAAA,YACZ,OAAO,QAAQ,GAAG;AAAA,YAClB,MAAM,IAAI;AAAA,YACV,QAAQ,SAAS,MAAM,IAAI;AAAA,YAC3B,aAAa,YAAY,IAAI,IAAI;AAAA,YACjC,KAAK,MAAM;AAAA,YACX,QAAQ,MAAM;AAAA,UAChB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAMO,SAAS,qBAAoC;AAClD,SAAO,OAAO,MAAM,SAAS;AAC3B,QAAI;AACF,YAAM,KAAK;AAAA,IACb,SAAS,KAAK;AACZ,YAAM,QAAQ,aAAa;AAC3B,UAAI,MAAO,eAAc,OAAO,GAAG;AACnC,iBAAW,GAAG;AACd,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEA,IAAM,SAAgC;AAAA,EACpC,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,OAAO;AACT;AAEA,IAAM,YAAY,oBAAI,IAAI,CAAC,SAAS,WAAW,OAAO,CAAC;AAEvD,SAAS,QAAQ,KAAa,MAAqC;AAEjE,MAAI,YAAY,IAAI,KAAK,SAAS,IAAI,EAAG;AACzC,QAAM,QAAQ,OAAO,OAAO,KAAK,KAAK,CAAC,KAAK;AAC5C,QAAM,SAAiB,CAAC;AACxB,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,EAAG,KAAI,CAAC,UAAU,IAAI,GAAG,EAAG,QAAO,GAAG,IAAI;AAExF,MAAI,UAAmB,KAAK;AAC5B,MAAI,YAAY,IAAI,GAAG;AACrB,WAAO,MAAM;AAAA,EACf,WAAW,YAAY,OAAO,GAAG;AAC/B,QAAI,SAAS,OAAO,EAAG;AACvB,WAAO,MAAM;AACb,cAAU,QAAQ;AAAA,EACpB,WAAW,OAAO,KAAK,UAAU,UAAU;AACzC,WAAO,YAAY,KAAK;AAAA,EAC1B;AACA,OAAK,UAAU,UAAU,UAAU,YAAY,OAAO,UAAU,OAAW,QAAO,QAAQ;AAC1F,MAAI,KAAK,EAAE,OAAO,YAAY,WAAW,UAAU,OAAO,WAAW,EAAE,GAAG,MAAM;AAClF;AAOO,SAAS,mBAAmB,KAAa;AAC9C,QAAM,YAAY,IAAI,4BAAS;AAAA,IAC7B,YAAY;AAAA,IACZ,MAAM,MAA+B,WAAW,UAAU;AACxD,UAAI;AACF,gBAAQ,KAAK,IAAI;AAAA,MACnB,UAAE;AACA,iBAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO,OAAO,WAAW;AAAA,IACvB,IAAI,MAA+B,UAAsB;AACvD,cAAQ,KAAK,IAAI;AACjB,eAAS;AAAA,IACX;AAAA,EACF,CAAC;AACD,SAAO;AAAA,IACL,OAAO;AAAA;AAAA,IAEP,QAAQ,EAAE,WAAW,CAAI,SAAe,KAAK;AAAA,IAC7C,YAAY,CAAC,SAAS;AAAA,EACxB;AACF;","names":[]}

package/dist/strapi.d.cts

@@ -0,0 +1,51 @@
+import { Writable } from 'node:stream';
+import { H as HttpLogOptions } from './http-BXAiU-rN.cjs';
+import { L as Logger } from './logger-CFMTzjsm.cjs';
+
+/** The parts of a Koa/Strapi context the middlewares use. */
+interface KoaContextLike {
+    method: string;
+    url: string;
+    status: number;
+    state: Record<string, unknown>;
+    get(name: string): string;
+    set(name: string, value: string): void;
+    /** Full matched route template, set by @koa/router (includes router prefixes such as /api). */
+    _matchedRoute?: unknown;
+}
+type KoaMiddleware = (ctx: KoaContextLike, next: () => Promise<unknown>) => Promise<void>;
+interface StrapiRequestLoggerOptions extends HttpLogOptions {
+    log: Logger;
+    /**
+     * Use a valid incoming x-request-id as request_id. Off by default: the server issues its own
+     * id (Strapi apps often use it for audit rows) and records the caller's id as
+     * upstream_request_id, which still links the logs of both services.
+     */
+    trustIncomingRequestId?: boolean;
+    /** ctx.state key shared with the app's own correlation middleware. Default "requestId". */
+    stateKey?: string;
+}
+/**
+ * Replaces 'strapi::logger' (put it first in config/middlewares): opens the request context and
+ * writes one http.request line per request.
+ */
+declare function strapiRequestLogger(opts: StrapiRequestLoggerOptions): KoaMiddleware;
+/**
+ * Put right after 'strapi::errors'. Records thrown errors on the request's http.request line and
+ * marks them, so the copy strapi::errors logs through strapi.log.error is not written twice.
+ */
+declare function strapiErrorCapture(): KoaMiddleware;
+/**
+ * Winston configuration for Strapi's config/logger.ts: every strapi.log.* call (app code and
+ * framework) becomes a contract JSON line with the request context. Level filtering is left to
+ * the logger (LOG_LEVEL).
+ */
+declare function strapiLoggerConfig(log: Logger): {
+    level: string;
+    format: {
+        transform: <T>(info: T) => T;
+    };
+    transports: Writable[];
+};
+
+export { type KoaContextLike, type KoaMiddleware, type StrapiRequestLoggerOptions, strapiErrorCapture, strapiLoggerConfig, strapiRequestLogger };

package/dist/strapi.d.ts

@@ -0,0 +1,51 @@
+import { Writable } from 'node:stream';
+import { H as HttpLogOptions } from './http-BI6ARZlD.js';
+import { L as Logger } from './logger-CFMTzjsm.js';
+
+/** The parts of a Koa/Strapi context the middlewares use. */
+interface KoaContextLike {
+    method: string;
+    url: string;
+    status: number;
+    state: Record<string, unknown>;
+    get(name: string): string;
+    set(name: string, value: string): void;
+    /** Full matched route template, set by @koa/router (includes router prefixes such as /api). */
+    _matchedRoute?: unknown;
+}
+type KoaMiddleware = (ctx: KoaContextLike, next: () => Promise<unknown>) => Promise<void>;
+interface StrapiRequestLoggerOptions extends HttpLogOptions {
+    log: Logger;
+    /**
+     * Use a valid incoming x-request-id as request_id. Off by default: the server issues its own
+     * id (Strapi apps often use it for audit rows) and records the caller's id as
+     * upstream_request_id, which still links the logs of both services.
+     */
+    trustIncomingRequestId?: boolean;
+    /** ctx.state key shared with the app's own correlation middleware. Default "requestId". */
+    stateKey?: string;
+}
+/**
+ * Replaces 'strapi::logger' (put it first in config/middlewares): opens the request context and
+ * writes one http.request line per request.
+ */
+declare function strapiRequestLogger(opts: StrapiRequestLoggerOptions): KoaMiddleware;
+/**
+ * Put right after 'strapi::errors'. Records thrown errors on the request's http.request line and
+ * marks them, so the copy strapi::errors logs through strapi.log.error is not written twice.
+ */
+declare function strapiErrorCapture(): KoaMiddleware;
+/**
+ * Winston configuration for Strapi's config/logger.ts: every strapi.log.* call (app code and
+ * framework) becomes a contract JSON line with the request context. Level filtering is left to
+ * the logger (LOG_LEVEL).
+ */
+declare function strapiLoggerConfig(log: Logger): {
+    level: string;
+    format: {
+        transform: <T>(info: T) => T;
+    };
+    transports: Writable[];
+};
+
+export { type KoaContextLike, type KoaMiddleware, type StrapiRequestLoggerOptions, strapiErrorCapture, strapiLoggerConfig, strapiRequestLogger };

package/dist/strapi.js

@@ -0,0 +1,134 @@
+import {
+  logHttpRequest
+} from "./chunk-KD5H5G6Y.js";
+import {
+  REQUEST_ID_RE,
+  newRequestId,
+  parseTraceparent
+} from "./chunk-KLBL7QEN.js";
+import {
+  currentStore,
+  isErrorLike,
+  isLogged,
+  markLogged,
+  recordErrorIn,
+  runWithStore
+} from "./chunk-QMC6BWGK.js";
+
+// src/strapi.ts
+import { Writable } from "stream";
+function routeOf(ctx) {
+  if (typeof ctx._matchedRoute === "string") return ctx._matchedRoute;
+  const path = ctx.state.route?.path;
+  return typeof path === "string" ? path : void 0;
+}
+function strapiRequestLogger(opts) {
+  const stateKey = opts.stateKey ?? "requestId";
+  return async (ctx, next) => {
+    const incoming = ctx.get("x-request-id");
+    const caller = incoming && REQUEST_ID_RE.test(incoming) ? incoming : void 0;
+    const existing = ctx.state[stateKey];
+    const requestId = typeof existing === "string" && existing ? existing : opts.trustIncomingRequestId && caller ? caller : newRequestId();
+    if (ctx.state[stateKey] === void 0) ctx.state[stateKey] = requestId;
+    ctx.set("X-Request-ID", requestId);
+    const fields = { request_id: requestId };
+    if (caller && caller !== requestId) fields.upstream_request_id = caller;
+    const trace = parseTraceparent(ctx.get("traceparent"));
+    if (trace) Object.assign(fields, trace);
+    const start = performance.now();
+    await runWithStore(fields, async (store) => {
+      let failed = false;
+      try {
+        await next();
+      } catch (err) {
+        failed = true;
+        recordErrorIn(store, err);
+        throw err;
+      } finally {
+        logHttpRequest(
+          opts.log,
+          {
+            method: ctx.method,
+            route: routeOf(ctx),
+            path: ctx.url,
+            status: failed ? 500 : ctx.status,
+            duration_ms: performance.now() - start,
+            err: store.error,
+            fields: store.fields
+          },
+          opts
+        );
+      }
+    });
+  };
+}
+function strapiErrorCapture() {
+  return async (_ctx, next) => {
+    try {
+      await next();
+    } catch (err) {
+      const store = currentStore();
+      if (store) recordErrorIn(store, err);
+      markLogged(err);
+      throw err;
+    }
+  };
+}
+var LEVELS = {
+  error: "error",
+  warn: "warn",
+  info: "info",
+  http: "debug",
+  verbose: "debug",
+  debug: "debug",
+  silly: "trace"
+};
+var META_SKIP = /* @__PURE__ */ new Set(["level", "message", "stack"]);
+function forward(log, info) {
+  if (isErrorLike(info) && isLogged(info)) return;
+  const level = LEVELS[String(info.level)] ?? "info";
+  const fields = {};
+  for (const [key, value] of Object.entries(info)) if (!META_SKIP.has(key)) fields[key] = value;
+  let message = info.message;
+  if (isErrorLike(info)) {
+    fields.err = info;
+  } else if (isErrorLike(message)) {
+    if (isLogged(message)) return;
+    fields.err = message;
+    message = message.message;
+  } else if (typeof info.stack === "string") {
+    fields.err_stack = info.stack;
+  }
+  if ((level === "warn" || level === "error") && fields.event === void 0) fields.event = "strapi.log";
+  log[level](typeof message === "string" ? message : String(message ?? ""), fields);
+}
+function strapiLoggerConfig(log) {
+  const transport = new Writable({
+    objectMode: true,
+    write(info, _encoding, callback) {
+      try {
+        forward(log, info);
+      } finally {
+        callback();
+      }
+    }
+  });
+  Object.assign(transport, {
+    log(info, callback) {
+      forward(log, info);
+      callback();
+    }
+  });
+  return {
+    level: "silly",
+    // Identity format: replaces Strapi's prettyPrint so the transport receives raw info objects.
+    format: { transform: (info) => info },
+    transports: [transport]
+  };
+}
+export {
+  strapiErrorCapture,
+  strapiLoggerConfig,
+  strapiRequestLogger
+};
+//# sourceMappingURL=strapi.js.map

package/dist/strapi.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/strapi.ts"],"sourcesContent":["import { Writable } from \"node:stream\";\nimport { currentStore, recordErrorIn, runWithStore } from \"./context\";\nimport { isErrorLike, isLogged, markLogged } from \"./error\";\nimport { logHttpRequest, newRequestId, parseTraceparent, REQUEST_ID_RE, type HttpLogOptions } from \"./http\";\nimport type { Level } from \"./levels\";\nimport type { Logger } from \"./logger\";\nimport type { Fields } from \"./normalize\";\n\n/** The parts of a Koa/Strapi context the middlewares use. */\nexport interface KoaContextLike {\n  method: string;\n  url: string;\n  status: number;\n  state: Record<string, unknown>;\n  get(name: string): string;\n  set(name: string, value: string): void;\n  /** Full matched route template, set by @koa/router (includes router prefixes such as /api). */\n  _matchedRoute?: unknown;\n}\n\nexport type KoaMiddleware = (ctx: KoaContextLike, next: () => Promise<unknown>) => Promise<void>;\n\nexport interface StrapiRequestLoggerOptions extends HttpLogOptions {\n  log: Logger;\n  /**\n   * Use a valid incoming x-request-id as request_id. Off by default: the server issues its own\n   * id (Strapi apps often use it for audit rows) and records the caller's id as\n   * upstream_request_id, which still links the logs of both services.\n   */\n  trustIncomingRequestId?: boolean;\n  /** ctx.state key shared with the app's own correlation middleware. Default \"requestId\". */\n  stateKey?: string;\n}\n\nfunction routeOf(ctx: KoaContextLike): string | undefined {\n  if (typeof ctx._matchedRoute === \"string\") return ctx._matchedRoute;\n  const path = (ctx.state.route as { path?: unknown } | undefined)?.path;\n  return typeof path === \"string\" ? path : undefined;\n}\n\n/**\n * Replaces 'strapi::logger' (put it first in config/middlewares): opens the request context and\n * writes one http.request line per request.\n */\nexport function strapiRequestLogger(opts: StrapiRequestLoggerOptions): KoaMiddleware {\n  const stateKey = opts.stateKey ?? \"requestId\";\n  return async (ctx, next) => {\n    const incoming = ctx.get(\"x-request-id\");\n    const caller = incoming && REQUEST_ID_RE.test(incoming) ? incoming : undefined;\n    const existing = ctx.state[stateKey];\n    const requestId =\n      typeof existing === \"string\" && existing ? existing : opts.trustIncomingRequestId && caller ? caller : newRequestId();\n    // A UUID v4 here is kept by correlation middlewares that only replace invalid ids.\n    if (ctx.state[stateKey] === undefined) ctx.state[stateKey] = requestId;\n    ctx.set(\"X-Request-ID\", requestId);\n\n    const fields: Fields = { request_id: requestId };\n    if (caller && caller !== requestId) fields.upstream_request_id = caller;\n    const trace = parseTraceparent(ctx.get(\"traceparent\"));\n    if (trace) Object.assign(fields, trace);\n\n    const start = performance.now();\n    await runWithStore(fields, async (store) => {\n      let failed = false;\n      try {\n        await next();\n      } catch (err) {\n        // Only reached when no error middleware handled it; Koa answers 500.\n        failed = true;\n        recordErrorIn(store, err);\n        throw err;\n      } finally {\n        logHttpRequest(\n          opts.log,\n          {\n            method: ctx.method,\n            route: routeOf(ctx),\n            path: ctx.url,\n            status: failed ? 500 : ctx.status,\n            duration_ms: performance.now() - start,\n            err: store.error,\n            fields: store.fields,\n          },\n          opts,\n        );\n      }\n    });\n  };\n}\n\n/**\n * Put right after 'strapi::errors'. Records thrown errors on the request's http.request line and\n * marks them, so the copy strapi::errors logs through strapi.log.error is not written twice.\n */\nexport function strapiErrorCapture(): KoaMiddleware {\n  return async (_ctx, next) => {\n    try {\n      await next();\n    } catch (err) {\n      const store = currentStore();\n      if (store) recordErrorIn(store, err);\n      markLogged(err);\n      throw err;\n    }\n  };\n}\n\nconst LEVELS: Record<string, Level> = {\n  error: \"error\",\n  warn: \"warn\",\n  info: \"info\",\n  http: \"debug\",\n  verbose: \"debug\",\n  debug: \"debug\",\n  silly: \"trace\",\n};\n\nconst META_SKIP = new Set([\"level\", \"message\", \"stack\"]);\n\nfunction forward(log: Logger, info: Record<string, unknown>): void {\n  // Already carried by the request's http.request line (see strapiErrorCapture).\n  if (isErrorLike(info) && isLogged(info)) return;\n  const level = LEVELS[String(info.level)] ?? \"info\";\n  const fields: Fields = {};\n  for (const [key, value] of Object.entries(info)) if (!META_SKIP.has(key)) fields[key] = value;\n\n  let message: unknown = info.message;\n  if (isErrorLike(info)) {\n    fields.err = info;\n  } else if (isErrorLike(message)) {\n    if (isLogged(message)) return;\n    fields.err = message;\n    message = message.message;\n  } else if (typeof info.stack === \"string\") {\n    fields.err_stack = info.stack;\n  }\n  if ((level === \"warn\" || level === \"error\") && fields.event === undefined) fields.event = \"strapi.log\";\n  log[level](typeof message === \"string\" ? message : String(message ?? \"\"), fields);\n}\n\n/**\n * Winston configuration for Strapi's config/logger.ts: every strapi.log.* call (app code and\n * framework) becomes a contract JSON line with the request context. Level filtering is left to\n * the logger (LOG_LEVEL).\n */\nexport function strapiLoggerConfig(log: Logger) {\n  const transport = new Writable({\n    objectMode: true,\n    write(info: Record<string, unknown>, _encoding, callback) {\n      try {\n        forward(log, info);\n      } finally {\n        callback();\n      }\n    },\n  });\n  // winston requires a `log(info, callback)` method on stream transports; writes go through write().\n  Object.assign(transport, {\n    log(info: Record<string, unknown>, callback: () => void) {\n      forward(log, info);\n      callback();\n    },\n  });\n  return {\n    level: \"silly\",\n    // Identity format: replaces Strapi's prettyPrint so the transport receives raw info objects.\n    format: { transform: <T>(info: T): T => info },\n    transports: [transport],\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,gBAAgB;AAkCzB,SAAS,QAAQ,KAAyC;AACxD,MAAI,OAAO,IAAI,kBAAkB,SAAU,QAAO,IAAI;AACtD,QAAM,OAAQ,IAAI,MAAM,OAA0C;AAClE,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAMO,SAAS,oBAAoB,MAAiD;AACnF,QAAM,WAAW,KAAK,YAAY;AAClC,SAAO,OAAO,KAAK,SAAS;AAC1B,UAAM,WAAW,IAAI,IAAI,cAAc;AACvC,UAAM,SAAS,YAAY,cAAc,KAAK,QAAQ,IAAI,WAAW;AACrE,UAAM,WAAW,IAAI,MAAM,QAAQ;AACnC,UAAM,YACJ,OAAO,aAAa,YAAY,WAAW,WAAW,KAAK,0BAA0B,SAAS,SAAS,aAAa;AAEtH,QAAI,IAAI,MAAM,QAAQ,MAAM,OAAW,KAAI,MAAM,QAAQ,IAAI;AAC7D,QAAI,IAAI,gBAAgB,SAAS;AAEjC,UAAM,SAAiB,EAAE,YAAY,UAAU;AAC/C,QAAI,UAAU,WAAW,UAAW,QAAO,sBAAsB;AACjE,UAAM,QAAQ,iBAAiB,IAAI,IAAI,aAAa,CAAC;AACrD,QAAI,MAAO,QAAO,OAAO,QAAQ,KAAK;AAEtC,UAAM,QAAQ,YAAY,IAAI;AAC9B,UAAM,aAAa,QAAQ,OAAO,UAAU;AAC1C,UAAI,SAAS;AACb,UAAI;AACF,cAAM,KAAK;AAAA,MACb,SAAS,KAAK;AAEZ,iBAAS;AACT,sBAAc,OAAO,GAAG;AACxB,cAAM;AAAA,MACR,UAAE;AACA;AAAA,UACE,KAAK;AAAA,UACL;AAAA,YACE,QAAQ,IAAI;AAAA,YACZ,OAAO,QAAQ,GAAG;AAAA,YAClB,MAAM,IAAI;AAAA,YACV,QAAQ,SAAS,MAAM,IAAI;AAAA,YAC3B,aAAa,YAAY,IAAI,IAAI;AAAA,YACjC,KAAK,MAAM;AAAA,YACX,QAAQ,MAAM;AAAA,UAChB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAMO,SAAS,qBAAoC;AAClD,SAAO,OAAO,MAAM,SAAS;AAC3B,QAAI;AACF,YAAM,KAAK;AAAA,IACb,SAAS,KAAK;AACZ,YAAM,QAAQ,aAAa;AAC3B,UAAI,MAAO,eAAc,OAAO,GAAG;AACnC,iBAAW,GAAG;AACd,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEA,IAAM,SAAgC;AAAA,EACpC,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,OAAO;AACT;AAEA,IAAM,YAAY,oBAAI,IAAI,CAAC,SAAS,WAAW,OAAO,CAAC;AAEvD,SAAS,QAAQ,KAAa,MAAqC;AAEjE,MAAI,YAAY,IAAI,KAAK,SAAS,IAAI,EAAG;AACzC,QAAM,QAAQ,OAAO,OAAO,KAAK,KAAK,CAAC,KAAK;AAC5C,QAAM,SAAiB,CAAC;AACxB,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,EAAG,KAAI,CAAC,UAAU,IAAI,GAAG,EAAG,QAAO,GAAG,IAAI;AAExF,MAAI,UAAmB,KAAK;AAC5B,MAAI,YAAY,IAAI,GAAG;AACrB,WAAO,MAAM;AAAA,EACf,WAAW,YAAY,OAAO,GAAG;AAC/B,QAAI,SAAS,OAAO,EAAG;AACvB,WAAO,MAAM;AACb,cAAU,QAAQ;AAAA,EACpB,WAAW,OAAO,KAAK,UAAU,UAAU;AACzC,WAAO,YAAY,KAAK;AAAA,EAC1B;AACA,OAAK,UAAU,UAAU,UAAU,YAAY,OAAO,UAAU,OAAW,QAAO,QAAQ;AAC1F,MAAI,KAAK,EAAE,OAAO,YAAY,WAAW,UAAU,OAAO,WAAW,EAAE,GAAG,MAAM;AAClF;AAOO,SAAS,mBAAmB,KAAa;AAC9C,QAAM,YAAY,IAAI,SAAS;AAAA,IAC7B,YAAY;AAAA,IACZ,MAAM,MAA+B,WAAW,UAAU;AACxD,UAAI;AACF,gBAAQ,KAAK,IAAI;AAAA,MACnB,UAAE;AACA,iBAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO,OAAO,WAAW;AAAA,IACvB,IAAI,MAA+B,UAAsB;AACvD,cAAQ,KAAK,IAAI;AACjB,eAAS;AAAA,IACX;AAAA,EACF,CAAC;AACD,SAAO;AAAA,IACL,OAAO;AAAA;AAAA,IAEP,QAAQ,EAAE,WAAW,CAAI,SAAe,KAAK;AAAA,IAC7C,YAAY,CAAC,SAAS;AAAA,EACxB;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tanngo11/log",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Structured JSON logging for Node services, implementing log contract v1",
   "license": "MIT",
   "repository": {
@@ -102,6 +102,16 @@
         "types": "./dist/prisma.d.cts",
         "default": "./dist/prisma.cjs"
       }
+    },
+    "./strapi": {
+      "import": {
+        "types": "./dist/strapi.d.ts",
+        "default": "./dist/strapi.js"
+      },
+      "require": {
+        "types": "./dist/strapi.d.cts",
+        "default": "./dist/strapi.cjs"
+      }
     }
   },
   "scripts": {
@@ -119,20 +129,25 @@
     }
   },
   "devDependencies": {
+    "@koa/router": "^12.0.2",
     "@nestjs/common": "^10.4.22",
     "@nestjs/core": "^10.4.22",
     "@nestjs/platform-express": "^10.4.22",
     "@nestjs/platform-fastify": "^10.4.22",
     "@prisma/client": "^6.19.3",
     "@types/express": "^4.17.25",
+    "@types/koa": "^2.15.2",
+    "@types/koa__router": "^12.0.5",
     "@types/node": "^22.20.4",
     "express": "^4.22.3",
     "fastify": "^5.12.5",
+    "koa": "^2.16.4",
     "prisma": "^6.19.3",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.8.2",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
-    "vitest": "^3.2.7"
+    "vitest": "^3.2.7",
+    "winston": "^3.10.0"
   }
 }