@tanngo11/log 0.6.1 → 0.6.3

package/dist/express.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/express.ts","../src/context.ts","../src/global.ts","../src/redact.ts","../src/error.ts","../src/normalize.ts","../src/request-id.ts","../src/http.ts"],"sourcesContent":["import type { ErrorRequestHandler, RequestHandler } from \"express\";\nimport { attachStore, recordErrorIn, runWithStore, storeOf, type ContextStore } from \"./context\";\nimport { logHttpRequest, requestContextFields, type HttpLogOptions } from \"./http\";\nimport type { Logger } from \"./logger\";\n\nfunction joinRoute(baseUrl: string | undefined, path: unknown): string {\n  return `${baseUrl ?? \"\"}${String(path)}` || \"/\";\n}\n\n// Express assigns req.route when a route matches, while req.baseUrl still holds the mount\n// path. It resets baseUrl before the response ends, so capture the full template here.\nfunction captureRoute(req: { baseUrl?: string }, store: ContextStore): void {\n  let value: unknown;\n  Object.defineProperty(req, \"route\", {\n    configurable: true,\n    enumerable: true,\n    get: () => value,\n    set: (route: { path?: unknown } | undefined) => {\n      value = route;\n      if (route?.path !== undefined) store.route = joinRoute(req.baseUrl, route.path);\n    },\n  });\n}\n\n/** Mount before routes. Opens the request context and writes the http.request line. */\nexport function requestLogger(log: Logger, opts: HttpLogOptions = {}): RequestHandler {\n  return (req, res, next) => {\n    const ctx = requestContextFields(req.headers);\n    res.setHeader(\"x-request-id\", ctx.request_id);\n    const start = performance.now();\n    runWithStore(ctx, (store) => {\n      attachStore(res, store);\n      captureRoute(req, store);\n      let done = false;\n      const finish = () => {\n        if (done) return;\n        done = true;\n        logHttpRequest(\n          log,\n          {\n            method: req.method,\n            route: store.route,\n            path: req.originalUrl,\n            status: res.writableFinished || res.headersSent ? res.statusCode : 499,\n            duration_ms: performance.now() - start,\n            err: store.error,\n            fields: store.fields,\n          },\n          opts,\n        );\n      };\n      res.once(\"finish\", finish);\n      res.once(\"close\", finish);\n      next();\n    });\n  };\n}\n\n/** Mount after routes, before your own error handler. Records the error for the summary line. */\nexport function errorRecorder(): ErrorRequestHandler {\n  return (err, _req, res, next) => {\n    const store = storeOf(res);\n    if (store) recordErrorIn(store, err);\n    next(err);\n  };\n}\n","import { AsyncLocalStorage } from \"node:async_hooks\";\nimport { globalSingleton } from \"./global\";\nimport type { Fields } from \"./normalize\";\n\nexport interface ContextStore {\n  fields: Fields;\n  error?: unknown;\n  /** Route template captured while the router still knew it (Express error path). */\n  route?: string;\n  parent?: ContextStore;\n}\n\nconst als = globalSingleton(\"als\", () => new AsyncLocalStorage<ContextStore>());\n\nexport const STORE_KEY: symbol = Symbol.for(\"@tanngo11/log.store\");\n\nexport function runWithStore<T>(fields: Fields, fn: (store: ContextStore) => T): T {\n  const parent = als.getStore();\n  const store: ContextStore = { fields: { ...parent?.fields, ...fields }, parent };\n  return als.run(store, () => fn(store));\n}\n\nexport function withContext<T>(fields: Fields, fn: () => T): T {\n  return runWithStore(fields, () => fn());\n}\n\nexport function currentStore(): ContextStore | undefined {\n  return als.getStore();\n}\n\nexport function getContext(): Fields {\n  return als.getStore()?.fields ?? {};\n}\n\n// Applies to the current context and every enclosing one, so a field added inside a nested\n// withContext/runJob still reaches the request's http.request line.\nexport function addContext(fields: Fields): void {\n  for (let s = als.getStore(); s; s = s.parent) Object.assign(s.fields, fields);\n}\n\n// Sets the error on the store and on enclosing stores that have none yet.\nexport function recordErrorIn(store: ContextStore, err: unknown): void {\n  store.error = err;\n  for (let s = store.parent; s; s = s.parent) if (s.error === undefined) s.error = err;\n}\n\n// Marks the error that the current request/job summary line should carry. Does not write a line.\nexport function recordError(err: unknown): void {\n  const store = als.getStore();\n  if (store) recordErrorIn(store, err);\n}\n\nexport function attachStore(target: object, store: ContextStore): void {\n  (target as Record<symbol, ContextStore>)[STORE_KEY] = store;\n}\n\nexport function storeOf(target: unknown): ContextStore | undefined {\n  if (typeof target !== \"object\" || target === null) return undefined;\n  return (target as Record<symbol, ContextStore | undefined>)[STORE_KEY];\n}\n","// Singletons shared by every copy of this package loaded in the process (ESM and CJS builds,\n// or duplicated installs), so context and dedupe state never split.\nexport function globalSingleton<T>(name: string, make: () => T): T {\n  const key = Symbol.for(`@tanngo11/log.${name}`);\n  const g = globalThis as unknown as Record<symbol, T | undefined>;\n  let value = g[key];\n  if (value === undefined) {\n    value = make();\n    g[key] = value;\n  }\n  return value;\n}\n","// Redaction shared by the logger and the error serializer. The collector redacts again,\n// but it cannot see secrets inside JSON-encoded strings, so the app side must catch them.\n\nexport const DEFAULT_REDACT_KEYS = [\n  \"password\", \"passwd\", \"pwd\", \"passphrase\", \"secret\", \"client_secret\",\n  \"token\", \"access_token\", \"refresh_token\", \"id_token\", \"auth_token\",\n  \"api_key\", \"apikey\", \"access_key\", \"secret_key\", \"private_key\",\n  \"authorization\", \"cookie\", \"set_cookie\", \"session_id\", \"sessionid\",\n  \"credential\", \"credentials\", \"dsn\", \"connection_string\", \"conn_string\", \"jwt\", \"bearer\",\n];\n\n/** Opt-in value patterns for `redactValues`. Not on by default: they can hit ordinary numbers. */\nexport const REDACT_PATTERNS = {\n  /**\n   * Vietnamese mobile numbers: 0912345678, +84912345678, 84912345678. Letters on either side\n   * rule a match out, so hex ids (a UUID segment such as 0912345678e0) are left alone.\n   */\n  phoneVN: /(?<![\\dA-Za-z+])(?:\\+?84|0)[35789]\\d{8}(?![\\dA-Za-z])/g,\n  /** Visa, Mastercard, Amex, Discover-like card numbers, with optional spaces or dashes. */\n  paymentCard: /(?<!\\d)(?:4\\d{3}|5[1-5]\\d{2}|2[2-7]\\d{2}|3[47]\\d{2}|6(?:011|5\\d{2}))(?:[ -]?\\d{4}){2}[ -]?\\d{1,4}(?!\\d)/g,\n  /** IPv4 addresses. */\n  ipv4: /(?<![\\d.])(?:\\d{1,3}\\.){3}\\d{1,3}(?![\\d.])/g,\n} as const;\n\n// Keys that only describe a secret (count, type, timestamps, flags) stay readable.\nconst SAFE_SUFFIXES = [\"_count\", \"_type\", \"_length\", \"_expires_at\", \"_expires_in\", \"_ttl\", \"_at\", \"_ms\", \"_enabled\"];\n\nexport const REDACTED = \"[REDACTED]\";\n\nexport function toSnakeCase(key: string): string {\n  return key\n    .replace(/([a-z0-9])([A-Z])/g, \"$1_$2\")\n    .replace(/([A-Z]+)([A-Z][a-z])/g, \"$1_$2\")\n    .replace(/[^A-Za-z0-9_]+/g, \"_\")\n    .toLowerCase();\n}\n\nconst URL_CREDENTIALS_RE = /([a-z][a-z0-9+.-]*:\\/\\/)[^\\s/@:\"']+:[^\\s/@\"']+@/gi;\nconst BEARER_RE = /\\bBearer\\s+[A-Za-z0-9._~+/=-]+/gi;\nconst JWT_RE = /\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+/g;\nconst EMAIL_RE = /[A-Za-z0-9._%+-]+@([A-Za-z0-9-]+(?:\\.[A-Za-z0-9-]+)*\\.[A-Za-z]{2,})/g;\n\nexport type KeyPattern = string | RegExp;\n\nexport interface RedactorOptions {\n  /** Extra sensitive keys: names (matched like the defaults) or patterns tested on the snake_case key. */\n  keys?: readonly KeyPattern[];\n  /** Extra value patterns; every match inside any string becomes [REDACTED]. */\n  values?: readonly RegExp[];\n}\n\nexport interface Redactor {\n  isSensitive(key: string): boolean;\n  /** Masks secrets and emails that appear inside free text. */\n  scrub(s: string): string;\n  /** JSON.stringify that redacts sensitive keys at any depth and never throws. */\n  json(value: unknown): string;\n}\n\nfunction globalize(re: RegExp): RegExp {\n  return re.flags.includes(\"g\") ? new RegExp(re.source, re.flags) : new RegExp(re.source, `${re.flags}g`);\n}\n\nexport function createRedactor(opts: RedactorOptions = {}): Redactor {\n  const words = [...DEFAULT_REDACT_KEYS];\n  const keyPatterns: RegExp[] = [];\n  for (const k of opts.keys ?? []) {\n    if (typeof k === \"string\") words.push(toSnakeCase(k));\n    else keyPatterns.push(new RegExp(k.source, k.flags.replace(\"g\", \"\")));\n  }\n  const valuePatterns = (opts.values ?? []).map(globalize);\n\n  const isSensitive = (key: string): boolean => {\n    const k = toSnakeCase(key);\n    if (keyPatterns.some((re) => re.test(k))) return true;\n    if (!words.includes(k) && SAFE_SUFFIXES.some((s) => k.endsWith(s))) return false;\n    return words.some((w) => k === w || k.startsWith(`${w}_`) || k.endsWith(`_${w}`) || k.includes(`_${w}_`));\n  };\n\n  const scrub = (s: string): string => {\n    let out = s\n      .replace(URL_CREDENTIALS_RE, `$1${REDACTED}@`)\n      .replace(BEARER_RE, `Bearer ${REDACTED}`)\n      .replace(JWT_RE, \"[REDACTED_JWT]\")\n      .replace(EMAIL_RE, \"***@$1\");\n    for (const re of valuePatterns) out = out.replace(re, REDACTED);\n    return out;\n  };\n\n  const json = (value: unknown): string => {\n    if (typeof value === \"string\") return value;\n    try {\n      const text = JSON.stringify(value, (key, val: unknown) => {\n        if (key && val !== null && val !== undefined && isSensitive(key)) return REDACTED;\n        if (typeof val === \"bigint\") return val.toString();\n        if (val instanceof Error) return { name: val.name, message: val.message };\n        return val;\n      });\n      return text ?? String(value);\n    } catch {\n      return String(value);\n    }\n  };\n\n  return { isSensitive, scrub, json };\n}\n\nexport const defaultRedactor: Redactor = createRedactor();\n","import { globalSingleton } from \"./global\";\nimport { defaultRedactor } from \"./redact\";\n\nexport interface ErrFields {\n  err_type?: string;\n  err_message?: string;\n  err_code?: string;\n  err_stack?: string;\n  err_cause?: string;\n  /** Database errors (pg): the table and constraint the server reported. */\n  db_table?: string;\n  db_constraint?: string;\n}\n\nconst MAX_CAUSE_DEPTH = 5;\n\nexport function isErrorLike(v: unknown): v is Error {\n  if (v instanceof Error) return true;\n  return (\n    typeof v === \"object\" &&\n    v !== null &&\n    typeof (v as { message?: unknown }).message === \"string\" &&\n    (\"stack\" in v || \"name\" in v)\n  );\n}\n\nfunction errorType(e: Error): string {\n  // pg's DatabaseError keeps the lowercase name \"error\"; its class name says more.\n  if (e.name && e.name !== \"Error\" && e.name !== \"error\") return e.name;\n  const ctor = (e as { constructor?: { name?: string } }).constructor?.name;\n  return ctor && ctor !== \"Object\" ? ctor : \"Error\";\n}\n\nexport function serializeError(err: unknown): ErrFields {\n  if (!isErrorLike(err)) {\n    if (typeof err === \"string\") return { err_type: \"string\", err_message: err };\n    return { err_type: typeof err, err_message: defaultRedactor.json(err) };\n  }\n  const e = err as Error & { code?: unknown; cause?: unknown; table?: unknown; constraint?: unknown };\n  const out: ErrFields = { err_type: errorType(e), err_message: String(e.message ?? \"\") };\n  if (e.code !== undefined && e.code !== null) out.err_code = String(e.code);\n  if (isSqlState(out.err_code)) {\n    out.err_message = stripSql(out.err_message ?? \"\");\n    if (typeof e.table === \"string\" && e.table) out.db_table = e.table;\n    if (typeof e.constraint === \"string\" && e.constraint) out.db_constraint = e.constraint;\n  }\n  if (typeof e.stack === \"string\") out.err_stack = e.stack;\n\n  const causes: string[] = [];\n  let cause = e.cause;\n  while (cause !== undefined && cause !== null && causes.length < MAX_CAUSE_DEPTH) {\n    if (isErrorLike(cause)) {\n      causes.push(`${errorType(cause)}: ${cause.message}`);\n      cause = (cause as { cause?: unknown }).cause;\n    } else {\n      causes.push(defaultRedactor.json(cause));\n      cause = undefined;\n    }\n  }\n  if (causes.length > 0) out.err_cause = causes.join(\" <- \");\n  return out;\n}\n\n// Postgres SQLSTATE codes: five digits or uppercase letters (23505, 40P01, 25P02).\nfunction isSqlState(code: string | undefined): boolean {\n  return code !== undefined && /^[0-9A-Z]{5}$/.test(code);\n}\n\nconst SQL_START_RE = /^\\s*(?:select|insert|update|delete|with|create|alter|drop|truncate|lock)\\b/i;\n\n/**\n * knex prefixes a failed query's message with the whole statement (\"update ... - deadlock\n * detected\"). A long statement filled err_message and the truncation cut off the server's reason,\n * the only part worth reading. Keeps the reason; the statement never reaches the log.\n */\nexport function stripSql(message: string): string {\n  if (!SQL_START_RE.test(message)) return message;\n  const at = message.lastIndexOf(\" - \");\n  return at === -1 ? message : message.slice(at + 3);\n}\n\n// The client hung up or sent a malformed request: worth a warn, not an error on our side.\nexport function isClientDisconnect(err: unknown): boolean {\n  const e = err as { code?: unknown; message?: unknown } | null;\n  const code = typeof e?.code === \"string\" ? e.code : \"\";\n  return (\n    code === \"ECONNRESET\" ||\n    code === \"ECONNABORTED\" ||\n    code === \"EPIPE\" ||\n    code === \"ERR_STREAM_PREMATURE_CLOSE\" ||\n    code.startsWith(\"HPE_\") ||\n    e?.message === \"aborted\"\n  );\n}\n\nconst logged = globalSingleton(\"logged\", () => new WeakSet<object>());\n\n// Marks an error as already written, so a later boundary (e.g. Next's onRequestError)\n// does not log it a second time.\nexport function markLogged(err: unknown): void {\n  if (typeof err === \"object\" && err !== null) logged.add(err);\n}\n\nexport function isLogged(err: unknown): boolean {\n  return typeof err === \"object\" && err !== null && logged.has(err);\n}\n","import { isErrorLike, serializeError } from \"./error\";\nimport type { Level } from \"./levels\";\nimport { REDACTED, toSnakeCase, type Redactor } from \"./redact\";\n\nexport { DEFAULT_REDACT_KEYS, toSnakeCase } from \"./redact\";\n\n/** Final per-field hook: return a replacement, or undefined to drop the field. */\nexport type RedactHook = (key: string, value: Primitive) => unknown;\n\nexport type Fields = Record<string, unknown>;\nexport type Primitive = string | number | boolean | null;\nexport type LogRecord = Record<string, Primitive>;\n\nexport interface NormalizeOptions {\n  snakeCase: boolean;\n  redactor: Redactor;\n  hook?: RedactHook;\n}\n\n// Fields the redact hook never sees, so every line keeps its level, message and event.\nconst HOOK_EXEMPT = new Set([\"level\", \"message\", \"event\"]);\n\n// Keys owned by Vector (overwritten or deleted on ingest) or by the logger itself.\nexport const RESERVED_KEYS = new Set([\n  \"project\", \"service\", \"vps\", \"version\", \"container_name\", \"container_id\", \"image\", \"stream\",\n  \"_timestamp\", \"label\", \"host\", \"source_type\", \"msg\", \"lvl\", \"severity\", \"level\", \"message\",\n]);\n\nexport const MAX_LINE_BYTES = 16000;\nconst MAX_MESSAGE = 500;\nconst MAX_STACK = 4000;\nconst MAX_STRING = 1000;\nconst MAX_DEPTH = 3;\nconst TRUNCATED = \"…[truncated]\";\n\n// Fields kept when a line is too large.\nconst KEEP_ON_SHRINK = new Set([\n  \"level\", \"message\", \"event\", \"request_id\", \"trace_id\", \"span_id\", \"job_name\", \"job_id\", \"job_attempt\",\n  \"user_id\", \"tenant_id\", \"err_type\", \"err_message\", \"err_code\",\n]);\n\nexport function stripUrl(url: string): string {\n  const noQuery = url.split(/[?#]/, 1)[0] ?? \"\";\n  return noQuery.replace(/^([a-z][a-z0-9+.-]*:\\/\\/)[^/@\\s]*@/i, \"$1\");\n}\n\nexport function truncate(s: string, max: number): string {\n  return s.length > max ? s.slice(0, max - TRUNCATED.length) + TRUNCATED : s;\n}\n\nfunction isPlainObject(v: unknown): v is Fields {\n  if (typeof v !== \"object\" || v === null) return false;\n  const proto = Object.getPrototypeOf(v);\n  return proto === Object.prototype || proto === null;\n}\n\nfunction isUrlKey(key: string): boolean {\n  return key === \"http_path\" || key === \"http_url\" || key.endsWith(\"_url\");\n}\n\nfunction flattenInto(out: LogRecord, prefix: string, obj: Fields, depth: number, opts: NormalizeOptions): void {\n  for (const [rawKey, value] of Object.entries(obj)) {\n    const key = opts.snakeCase ? toSnakeCase(rawKey) : rawKey;\n    const full = prefix ? `${prefix}_${key}` : key;\n    if (value === undefined || typeof value === \"function\" || typeof value === \"symbol\") continue;\n    if (value !== null && (opts.redactor.isSensitive(rawKey) || opts.redactor.isSensitive(full))) {\n      out[full] = REDACTED;\n      continue;\n    }\n    if (value === null || typeof value === \"string\" || typeof value === \"boolean\") {\n      out[full] = value;\n    } else if (typeof value === \"number\") {\n      out[full] = Number.isFinite(value) ? value : String(value);\n    } else if (typeof value === \"bigint\") {\n      out[full] = value.toString();\n    } else if (value instanceof Date) {\n      out[full] = Number.isNaN(value.getTime()) ? \"Invalid Date\" : value.toISOString();\n    } else if (isErrorLike(value)) {\n      out[full] = `${value.name}: ${value.message}`;\n    } else if (isPlainObject(value) && depth < MAX_DEPTH - 1) {\n      flattenInto(out, full, value, depth + 1, opts);\n    } else {\n      // Arrays, deep objects, class instances: stringified with sensitive keys redacted.\n      out[full] = opts.redactor.json(value);\n    }\n  }\n}\n\n// Correlation ids are opaque tokens: value patterns such as phoneVN can match inside a hex\n// segment and break the join between services, so a well-formed id is never scrubbed.\nconst ID_VALUE_RE = /^[A-Za-z0-9._:-]{1,128}$/;\n\nfunction isIdKey(key: string): boolean {\n  return key === \"request_id\" || key === \"trace_id\" || key === \"span_id\" || key.endsWith(\"_request_id\");\n}\n\nfunction finalize(key: string, value: Primitive, opts: NormalizeOptions): Primitive {\n  if (typeof value !== \"string\") return value;\n  if (isIdKey(key) && ID_VALUE_RE.test(value)) return value;\n  const v = opts.redactor.scrub(isUrlKey(key) ? stripUrl(value) : value);\n  return truncate(v, key === \"err_stack\" ? MAX_STACK : MAX_STRING);\n}\n\nexport function buildRecord(\n  level: Level,\n  message: unknown,\n  sources: (Fields | undefined)[],\n  opts: NormalizeOptions,\n): LogRecord {\n  const merged: Fields = {};\n  for (const source of sources) if (source) Object.assign(merged, source);\n\n  let err: unknown;\n  if (merged.err !== undefined && merged.err !== null) {\n    err = merged.err;\n    delete merged.err;\n  } else if (isErrorLike(merged.error)) {\n    err = merged.error;\n    delete merged.error;\n  }\n\n  const flat: LogRecord = {};\n  flattenInto(flat, \"\", merged, 0, opts);\n  if (err !== undefined) Object.assign(flat, serializeError(err));\n\n  const text = typeof message === \"string\" ? message : opts.redactor.json(message);\n  const out: LogRecord = { level, message: truncate(opts.redactor.scrub(text), MAX_MESSAGE) };\n  for (const [k, v] of Object.entries(flat)) {\n    const key = RESERVED_KEYS.has(k) ? `app_${k}` : k;\n    let value = finalize(key, v, opts);\n    if (opts.hook && !HOOK_EXEMPT.has(key)) {\n      const replaced = opts.hook(key, value);\n      if (replaced === undefined) continue;\n      value = typeof replaced === \"object\" && replaced !== null ? opts.redactor.json(replaced) : (replaced as Primitive);\n    }\n    out[key] = value;\n  }\n  return out;\n}\n\nfunction byteLength(s: string): number {\n  // UTF-8 uses at most 3 bytes per UTF-16 code unit: skip encoding short lines.\n  if (s.length * 3 <= MAX_LINE_BYTES) return s.length;\n  return new TextEncoder().encode(s).length;\n}\n\nexport function serializeRecord(record: LogRecord): string {\n  const line = JSON.stringify(record);\n  if (byteLength(line) <= MAX_LINE_BYTES) return line;\n  const small: LogRecord = {};\n  for (const [k, v] of Object.entries(record)) {\n    if (KEEP_ON_SHRINK.has(k) || k.startsWith(\"http_\")) small[k] = v;\n  }\n  small.log_truncated = true;\n  return JSON.stringify(small);\n}\n","// No imports: this module is shared with the edge entry (next-edge).\nexport const REQUEST_ID_RE = /^[A-Za-z0-9._-]{1,64}$/;\nconst TRACEPARENT_RE = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/;\n\nexport function newRequestId(): string {\n  return globalThis.crypto.randomUUID();\n}\n\nfunction first(header?: string | string[] | null): string | undefined {\n  return Array.isArray(header) ? header[0] : (header ?? undefined);\n}\n\nexport function resolveRequestId(header?: string | string[] | null): string {\n  const value = first(header);\n  return value && REQUEST_ID_RE.test(value) ? value : newRequestId();\n}\n\nexport function parseTraceparent(header?: string | string[] | null): { trace_id: string; span_id: string } | undefined {\n  const value = first(header)?.trim().toLowerCase();\n  const m = value ? TRACEPARENT_RE.exec(value) : null;\n  if (!m) return undefined;\n  const [, version, traceId, spanId] = m as unknown as [string, string, string, string];\n  if (version === \"ff\" || /^0+$/.test(traceId) || /^0+$/.test(spanId)) return undefined;\n  return { trace_id: traceId, span_id: spanId };\n}\n","import { getContext } from \"./context\";\nimport { isClientDisconnect, markLogged, serializeError } from \"./error\";\nimport type { Logger } from \"./logger\";\nimport { stripUrl, type Fields } from \"./normalize\";\nimport { parseTraceparent, resolveRequestId } from \"./request-id\";\n\nexport { newRequestId, parseTraceparent, REQUEST_ID_RE, resolveRequestId } from \"./request-id\";\n\nexport type HeaderSource = Headers | Record<string, string | string[] | undefined>;\n\nfunction header(headers: HeaderSource, name: string): string | string[] | undefined {\n  if (typeof (headers as Headers).get === \"function\") return (headers as Headers).get(name) ?? undefined;\n  return (headers as Record<string, string | string[] | undefined>)[name];\n}\n\nexport function requestContextFields(headers: HeaderSource): { request_id: string; trace_id?: string; span_id?: string } {\n  const out: { request_id: string; trace_id?: string; span_id?: string } = {\n    request_id: resolveRequestId(header(headers, \"x-request-id\")),\n  };\n  const tp = parseTraceparent(header(headers, \"traceparent\"));\n  if (tp) Object.assign(out, tp);\n  return out;\n}\n\n// Headers to forward to services we own, so their logs share request_id / trace_id.\nexport function propagationHeaders(): Record<string, string> {\n  const ctx = getContext();\n  const out: Record<string, string> = {};\n  if (typeof ctx.request_id === \"string\") out[\"x-request-id\"] = ctx.request_id;\n  if (typeof ctx.trace_id === \"string\" && typeof ctx.span_id === \"string\") {\n    out.traceparent = `00-${ctx.trace_id}-${ctx.span_id}-01`;\n  }\n  return out;\n}\n\nexport const DEFAULT_SKIP_PATHS: (string | RegExp)[] = [\n  // Also under a prefix such as /api/v1/health.\n  /(^|\\/)(health|healthz|ready|readyz|livez)\\/?$/,\n  \"/favicon.ico\",\n  /^\\/_next\\/static\\//,\n];\n\nexport interface HttpLogOptions {\n  skipPaths?: (string | RegExp)[];\n}\n\nexport interface HttpRequestInfo {\n  method: string;\n  route?: string;\n  path: string;\n  status: number;\n  duration_ms?: number;\n  err?: unknown;\n  fields?: Fields;\n}\n\nexport function shouldSkip(method: string, path: string, skipPaths: (string | RegExp)[] = DEFAULT_SKIP_PATHS): boolean {\n  if (method.toUpperCase() === \"OPTIONS\") return true;\n  const p = stripUrl(path);\n  return skipPaths.some((s) => (typeof s === \"string\" ? p === s : s.test(p)));\n}\n\n// Writes the one `http.request` summary line for an inbound request. Skipped paths are still\n// logged when they fail with a 5xx, so a failing health check stays visible.\nexport function logHttpRequest(log: Logger, info: HttpRequestInfo, opts: HttpLogOptions = {}): void {\n  if (info.status < 500 && shouldSkip(info.method, info.path, opts.skipPaths)) return;\n  const hasErr = info.err !== undefined && info.err !== null;\n  // A client that hung up mid-request is not a server failure, whatever status the app set.\n  const clientGone = hasErr && isClientDisconnect(info.err);\n  const level = info.status >= 500 && !clientGone ? \"error\" : info.status >= 400 ? \"warn\" : \"info\";\n  const path = stripUrl(info.path);\n  const errFields: Fields = {};\n  if (hasErr) {\n    Object.assign(errFields, serializeError(info.err));\n    if (info.status < 500 || clientGone) delete errFields.err_stack;\n    if (clientGone) errFields.client_disconnect = true;\n    markLogged(info.err);\n  }\n  // Route templates keep the message bounded; the raw path would make one message per URL.\n  const message = info.route ? `${info.method} ${info.route} ${info.status}` : `${info.method} ${info.status}`;\n  log[level](message, {\n    ...info.fields,\n    event: \"http.request\",\n    http_method: info.method,\n    http_route: info.route,\n    http_path: path,\n    http_status: info.status,\n    duration_ms: info.duration_ms === undefined ? undefined : Math.round(info.duration_ms),\n    ...errFields,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,8BAAkC;;;ACE3B,SAAS,gBAAmB,MAAc,MAAkB;AACjE,QAAM,MAAM,uBAAO,IAAI,iBAAiB,IAAI,EAAE;AAC9C,QAAM,IAAI;AACV,MAAI,QAAQ,EAAE,GAAG;AACjB,MAAI,UAAU,QAAW;AACvB,YAAQ,KAAK;AACb,MAAE,GAAG,IAAI;AAAA,EACX;AACA,SAAO;AACT;;;ADCA,IAAM,MAAM,gBAAgB,OAAO,MAAM,IAAI,0CAAgC,CAAC;AAEvE,IAAM,YAAoB,uBAAO,IAAI,qBAAqB;AAE1D,SAAS,aAAgB,QAAgB,IAAmC;AACjF,QAAM,SAAS,IAAI,SAAS;AAC5B,QAAM,QAAsB,EAAE,QAAQ,EAAE,GAAG,QAAQ,QAAQ,GAAG,OAAO,GAAG,OAAO;AAC/E,SAAO,IAAI,IAAI,OAAO,MAAM,GAAG,KAAK,CAAC;AACvC;AAqBO,SAAS,cAAc,OAAqB,KAAoB;AACrE,QAAM,QAAQ;AACd,WAAS,IAAI,MAAM,QAAQ,GAAG,IAAI,EAAE,OAAQ,KAAI,EAAE,UAAU,OAAW,GAAE,QAAQ;AACnF;AAQO,SAAS,YAAY,QAAgB,OAA2B;AACrE,EAAC,OAAwC,SAAS,IAAI;AACxD;AAEO,SAAS,QAAQ,QAA2C;AACjE,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,SAAQ,OAAoD,SAAS;AACvE;;;AExDO,IAAM,sBAAsB;AAAA,EACjC;AAAA,EAAY;AAAA,EAAU;AAAA,EAAO;AAAA,EAAc;AAAA,EAAU;AAAA,EACrD;AAAA,EAAS;AAAA,EAAgB;AAAA,EAAiB;AAAA,EAAY;AAAA,EACtD;AAAA,EAAW;AAAA,EAAU;AAAA,EAAc;AAAA,EAAc;AAAA,EACjD;AAAA,EAAiB;AAAA,EAAU;AAAA,EAAc;AAAA,EAAc;AAAA,EACvD;AAAA,EAAc;AAAA,EAAe;AAAA,EAAO;AAAA,EAAqB;AAAA,EAAe;AAAA,EAAO;AACjF;AAgBA,IAAM,gBAAgB,CAAC,UAAU,SAAS,WAAW,eAAe,eAAe,QAAQ,OAAO,OAAO,UAAU;AAE5G,IAAM,WAAW;AAEjB,SAAS,YAAY,KAAqB;AAC/C,SAAO,IACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,yBAAyB,OAAO,EACxC,QAAQ,mBAAmB,GAAG,EAC9B,YAAY;AACjB;AAEA,IAAM,qBAAqB;AAC3B,IAAM,YAAY;AAClB,IAAM,SAAS;AACf,IAAM,WAAW;AAmBjB,SAAS,UAAU,IAAoB;AACrC,SAAO,GAAG,MAAM,SAAS,GAAG,IAAI,IAAI,OAAO,GAAG,QAAQ,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,QAAQ,GAAG,GAAG,KAAK,GAAG;AACxG;AAEO,SAAS,eAAe,OAAwB,CAAC,GAAa;AACnE,QAAM,QAAQ,CAAC,GAAG,mBAAmB;AACrC,QAAM,cAAwB,CAAC;AAC/B,aAAW,KAAK,KAAK,QAAQ,CAAC,GAAG;AAC/B,QAAI,OAAO,MAAM,SAAU,OAAM,KAAK,YAAY,CAAC,CAAC;AAAA,QAC/C,aAAY,KAAK,IAAI,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,KAAK,EAAE,CAAC,CAAC;AAAA,EACtE;AACA,QAAM,iBAAiB,KAAK,UAAU,CAAC,GAAG,IAAI,SAAS;AAEvD,QAAM,cAAc,CAAC,QAAyB;AAC5C,UAAM,IAAI,YAAY,GAAG;AACzB,QAAI,YAAY,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,EAAG,QAAO;AACjD,QAAI,CAAC,MAAM,SAAS,CAAC,KAAK,cAAc,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAG,QAAO;AAC3E,WAAO,MAAM,KAAK,CAAC,MAAM,MAAM,KAAK,EAAE,WAAW,GAAG,CAAC,GAAG,KAAK,EAAE,SAAS,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,GAAG,CAAC;AAAA,EAC1G;AAEA,QAAM,QAAQ,CAAC,MAAsB;AACnC,QAAI,MAAM,EACP,QAAQ,oBAAoB,KAAK,QAAQ,GAAG,EAC5C,QAAQ,WAAW,UAAU,QAAQ,EAAE,EACvC,QAAQ,QAAQ,gBAAgB,EAChC,QAAQ,UAAU,QAAQ;AAC7B,eAAW,MAAM,cAAe,OAAM,IAAI,QAAQ,IAAI,QAAQ;AAC9D,WAAO;AAAA,EACT;AAEA,QAAM,OAAO,CAAC,UAA2B;AACvC,QAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAI;AACF,YAAM,OAAO,KAAK,UAAU,OAAO,CAAC,KAAK,QAAiB;AACxD,YAAI,OAAO,QAAQ,QAAQ,QAAQ,UAAa,YAAY,GAAG,EAAG,QAAO;AACzE,YAAI,OAAO,QAAQ,SAAU,QAAO,IAAI,SAAS;AACjD,YAAI,eAAe,MAAO,QAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ;AACxE,eAAO;AAAA,MACT,CAAC;AACD,aAAO,QAAQ,OAAO,KAAK;AAAA,IAC7B,QAAQ;AACN,aAAO,OAAO,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,SAAO,EAAE,aAAa,OAAO,KAAK;AACpC;AAEO,IAAM,kBAA4B,eAAe;;;AC7FxD,IAAM,kBAAkB;AAEjB,SAAS,YAAY,GAAwB;AAClD,MAAI,aAAa,MAAO,QAAO;AAC/B,SACE,OAAO,MAAM,YACb,MAAM,QACN,OAAQ,EAA4B,YAAY,aAC/C,WAAW,KAAK,UAAU;AAE/B;AAEA,SAAS,UAAU,GAAkB;AAEnC,MAAI,EAAE,QAAQ,EAAE,SAAS,WAAW,EAAE,SAAS,QAAS,QAAO,EAAE;AACjE,QAAM,OAAQ,EAA0C,aAAa;AACrE,SAAO,QAAQ,SAAS,WAAW,OAAO;AAC5C;AAEO,SAAS,eAAe,KAAyB;AACtD,MAAI,CAAC,YAAY,GAAG,GAAG;AACrB,QAAI,OAAO,QAAQ,SAAU,QAAO,EAAE,UAAU,UAAU,aAAa,IAAI;AAC3E,WAAO,EAAE,UAAU,OAAO,KAAK,aAAa,gBAAgB,KAAK,GAAG,EAAE;AAAA,EACxE;AACA,QAAM,IAAI;AACV,QAAM,MAAiB,EAAE,UAAU,UAAU,CAAC,GAAG,aAAa,OAAO,EAAE,WAAW,EAAE,EAAE;AACtF,MAAI,EAAE,SAAS,UAAa,EAAE,SAAS,KAAM,KAAI,WAAW,OAAO,EAAE,IAAI;AACzE,MAAI,WAAW,IAAI,QAAQ,GAAG;AAC5B,QAAI,cAAc,SAAS,IAAI,eAAe,EAAE;AAChD,QAAI,OAAO,EAAE,UAAU,YAAY,EAAE,MAAO,KAAI,WAAW,EAAE;AAC7D,QAAI,OAAO,EAAE,eAAe,YAAY,EAAE,WAAY,KAAI,gBAAgB,EAAE;AAAA,EAC9E;AACA,MAAI,OAAO,EAAE,UAAU,SAAU,KAAI,YAAY,EAAE;AAEnD,QAAM,SAAmB,CAAC;AAC1B,MAAI,QAAQ,EAAE;AACd,SAAO,UAAU,UAAa,UAAU,QAAQ,OAAO,SAAS,iBAAiB;AAC/E,QAAI,YAAY,KAAK,GAAG;AACtB,aAAO,KAAK,GAAG,UAAU,KAAK,CAAC,KAAK,MAAM,OAAO,EAAE;AACnD,cAAS,MAA8B;AAAA,IACzC,OAAO;AACL,aAAO,KAAK,gBAAgB,KAAK,KAAK,CAAC;AACvC,cAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,OAAO,SAAS,EAAG,KAAI,YAAY,OAAO,KAAK,MAAM;AACzD,SAAO;AACT;AAGA,SAAS,WAAW,MAAmC;AACrD,SAAO,SAAS,UAAa,gBAAgB,KAAK,IAAI;AACxD;AAEA,IAAM,eAAe;AAOd,SAAS,SAAS,SAAyB;AAChD,MAAI,CAAC,aAAa,KAAK,OAAO,EAAG,QAAO;AACxC,QAAM,KAAK,QAAQ,YAAY,KAAK;AACpC,SAAO,OAAO,KAAK,UAAU,QAAQ,MAAM,KAAK,CAAC;AACnD;AAGO,SAAS,mBAAmB,KAAuB;AACxD,QAAM,IAAI;AACV,QAAM,OAAO,OAAO,GAAG,SAAS,WAAW,EAAE,OAAO;AACpD,SACE,SAAS,gBACT,SAAS,kBACT,SAAS,WACT,SAAS,gCACT,KAAK,WAAW,MAAM,KACtB,GAAG,YAAY;AAEnB;AAEA,IAAM,SAAS,gBAAgB,UAAU,MAAM,oBAAI,QAAgB,CAAC;AAI7D,SAAS,WAAW,KAAoB;AAC7C,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO,IAAI,GAAG;AAC7D;;;AC5DO,SAAS,SAAS,KAAqB;AAC5C,QAAM,UAAU,IAAI,MAAM,QAAQ,CAAC,EAAE,CAAC,KAAK;AAC3C,SAAO,QAAQ,QAAQ,uCAAuC,IAAI;AACpE;;;AC3CO,IAAM,gBAAgB;AAC7B,IAAM,iBAAiB;AAEhB,SAAS,eAAuB;AACrC,SAAO,WAAW,OAAO,WAAW;AACtC;AAEA,SAAS,MAAMA,SAAuD;AACpE,SAAO,MAAM,QAAQA,OAAM,IAAIA,QAAO,CAAC,IAAKA,WAAU;AACxD;AAEO,SAAS,iBAAiBA,SAA2C;AAC1E,QAAM,QAAQ,MAAMA,OAAM;AAC1B,SAAO,SAAS,cAAc,KAAK,KAAK,IAAI,QAAQ,aAAa;AACnE;AAEO,SAAS,iBAAiBA,SAAsF;AACrH,QAAM,QAAQ,MAAMA,OAAM,GAAG,KAAK,EAAE,YAAY;AAChD,QAAM,IAAI,QAAQ,eAAe,KAAK,KAAK,IAAI;AAC/C,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,CAAC,EAAE,SAAS,SAAS,MAAM,IAAI;AACrC,MAAI,YAAY,QAAQ,OAAO,KAAK,OAAO,KAAK,OAAO,KAAK,MAAM,EAAG,QAAO;AAC5E,SAAO,EAAE,UAAU,SAAS,SAAS,OAAO;AAC9C;;;ACdA,SAAS,OAAO,SAAuB,MAA6C;AAClF,MAAI,OAAQ,QAAoB,QAAQ,WAAY,QAAQ,QAAoB,IAAI,IAAI,KAAK;AAC7F,SAAQ,QAA0D,IAAI;AACxE;AAEO,SAAS,qBAAqB,SAAoF;AACvH,QAAM,MAAmE;AAAA,IACvE,YAAY,iBAAiB,OAAO,SAAS,cAAc,CAAC;AAAA,EAC9D;AACA,QAAM,KAAK,iBAAiB,OAAO,SAAS,aAAa,CAAC;AAC1D,MAAI,GAAI,QAAO,OAAO,KAAK,EAAE;AAC7B,SAAO;AACT;AAaO,IAAM,qBAA0C;AAAA;AAAA,EAErD;AAAA,EACA;AAAA,EACA;AACF;AAgBO,SAAS,WAAW,QAAgB,MAAc,YAAiC,oBAA6B;AACrH,MAAI,OAAO,YAAY,MAAM,UAAW,QAAO;AAC/C,QAAM,IAAI,SAAS,IAAI;AACvB,SAAO,UAAU,KAAK,CAAC,MAAO,OAAO,MAAM,WAAW,MAAM,IAAI,EAAE,KAAK,CAAC,CAAE;AAC5E;AAIO,SAAS,eAAe,KAAa,MAAuB,OAAuB,CAAC,GAAS;AAClG,MAAI,KAAK,SAAS,OAAO,WAAW,KAAK,QAAQ,KAAK,MAAM,KAAK,SAAS,EAAG;AAC7E,QAAM,SAAS,KAAK,QAAQ,UAAa,KAAK,QAAQ;AAEtD,QAAM,aAAa,UAAU,mBAAmB,KAAK,GAAG;AACxD,QAAM,QAAQ,KAAK,UAAU,OAAO,CAAC,aAAa,UAAU,KAAK,UAAU,MAAM,SAAS;AAC1F,QAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,QAAM,YAAoB,CAAC;AAC3B,MAAI,QAAQ;AACV,WAAO,OAAO,WAAW,eAAe,KAAK,GAAG,CAAC;AACjD,QAAI,KAAK,SAAS,OAAO,WAAY,QAAO,UAAU;AACtD,QAAI,WAAY,WAAU,oBAAoB;AAC9C,eAAW,KAAK,GAAG;AAAA,EACrB;AAEA,QAAM,UAAU,KAAK,QAAQ,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,KAAK,MAAM,IAAI,KAAK,MAAM;AAC1G,MAAI,KAAK,EAAE,SAAS;AAAA,IAClB,GAAG,KAAK;AAAA,IACR,OAAO;AAAA,IACP,aAAa,KAAK;AAAA,IAClB,YAAY,KAAK;AAAA,IACjB,WAAW;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK,gBAAgB,SAAY,SAAY,KAAK,MAAM,KAAK,WAAW;AAAA,IACrF,GAAG;AAAA,EACL,CAAC;AACH;;;APrFA,SAAS,UAAU,SAA6B,MAAuB;AACrE,SAAO,GAAG,WAAW,EAAE,GAAG,OAAO,IAAI,CAAC,MAAM;AAC9C;AAIA,SAAS,aAAa,KAA2B,OAA2B;AAC1E,MAAI;AACJ,SAAO,eAAe,KAAK,SAAS;AAAA,IAClC,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,KAAK,MAAM;AAAA,IACX,KAAK,CAAC,UAA0C;AAC9C,cAAQ;AACR,UAAI,OAAO,SAAS,OAAW,OAAM,QAAQ,UAAU,IAAI,SAAS,MAAM,IAAI;AAAA,IAChF;AAAA,EACF,CAAC;AACH;AAGO,SAAS,cAAc,KAAa,OAAuB,CAAC,GAAmB;AACpF,SAAO,CAAC,KAAK,KAAK,SAAS;AACzB,UAAM,MAAM,qBAAqB,IAAI,OAAO;AAC5C,QAAI,UAAU,gBAAgB,IAAI,UAAU;AAC5C,UAAM,QAAQ,YAAY,IAAI;AAC9B,iBAAa,KAAK,CAAC,UAAU;AAC3B,kBAAY,KAAK,KAAK;AACtB,mBAAa,KAAK,KAAK;AACvB,UAAI,OAAO;AACX,YAAM,SAAS,MAAM;AACnB,YAAI,KAAM;AACV,eAAO;AACP;AAAA,UACE;AAAA,UACA;AAAA,YACE,QAAQ,IAAI;AAAA,YACZ,OAAO,MAAM;AAAA,YACb,MAAM,IAAI;AAAA,YACV,QAAQ,IAAI,oBAAoB,IAAI,cAAc,IAAI,aAAa;AAAA,YACnE,aAAa,YAAY,IAAI,IAAI;AAAA,YACjC,KAAK,MAAM;AAAA,YACX,QAAQ,MAAM;AAAA,UAChB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,UAAI,KAAK,UAAU,MAAM;AACzB,UAAI,KAAK,SAAS,MAAM;AACxB,WAAK;AAAA,IACP,CAAC;AAAA,EACH;AACF;AAGO,SAAS,gBAAqC;AACnD,SAAO,CAAC,KAAK,MAAM,KAAK,SAAS;AAC/B,UAAM,QAAQ,QAAQ,GAAG;AACzB,QAAI,MAAO,eAAc,OAAO,GAAG;AACnC,SAAK,GAAG;AAAA,EACV;AACF;","names":["header"]}
+{"version":3,"sources":["../src/express.ts","../src/context.ts","../src/global.ts","../src/redact.ts","../src/error.ts","../src/normalize.ts","../src/request-id.ts","../src/http.ts"],"sourcesContent":["import type { ErrorRequestHandler, RequestHandler } from \"express\";\nimport { attachStore, recordErrorIn, runWithStore, storeOf, type ContextStore } from \"./context\";\nimport { logHttpRequest, requestContextFields, type HttpLogOptions } from \"./http\";\nimport type { Logger } from \"./logger\";\n\nfunction joinRoute(baseUrl: string | undefined, path: unknown): string {\n  return `${baseUrl ?? \"\"}${String(path)}` || \"/\";\n}\n\n// Express assigns req.route when a route matches, while req.baseUrl still holds the mount\n// path. It resets baseUrl before the response ends, so capture the full template here.\nfunction captureRoute(req: { baseUrl?: string }, store: ContextStore): void {\n  let value: unknown;\n  Object.defineProperty(req, \"route\", {\n    configurable: true,\n    enumerable: true,\n    get: () => value,\n    set: (route: { path?: unknown } | undefined) => {\n      value = route;\n      if (route?.path !== undefined) store.route = joinRoute(req.baseUrl, route.path);\n    },\n  });\n}\n\n/** Mount before routes. Opens the request context and writes the http.request line. */\nexport function requestLogger(log: Logger, opts: HttpLogOptions = {}): RequestHandler {\n  return (req, res, next) => {\n    const ctx = requestContextFields(req.headers);\n    res.setHeader(\"x-request-id\", ctx.request_id);\n    const start = performance.now();\n    runWithStore(ctx, (store) => {\n      attachStore(res, store);\n      captureRoute(req, store);\n      let done = false;\n      const finish = () => {\n        if (done) return;\n        done = true;\n        logHttpRequest(\n          log,\n          {\n            method: req.method,\n            route: store.route,\n            path: req.originalUrl,\n            status: res.writableFinished || res.headersSent ? res.statusCode : 499,\n            duration_ms: performance.now() - start,\n            err: store.error,\n            fields: store.fields,\n          },\n          opts,\n        );\n      };\n      res.once(\"finish\", finish);\n      res.once(\"close\", finish);\n      next();\n    });\n  };\n}\n\n/** Mount after routes, before your own error handler. Records the error for the summary line. */\nexport function errorRecorder(): ErrorRequestHandler {\n  return (err, _req, res, next) => {\n    const store = storeOf(res);\n    if (store) recordErrorIn(store, err);\n    next(err);\n  };\n}\n","import { AsyncLocalStorage } from \"node:async_hooks\";\nimport { globalSingleton } from \"./global\";\nimport type { Fields } from \"./normalize\";\n\nexport interface ContextStore {\n  fields: Fields;\n  error?: unknown;\n  /** Route template captured while the router still knew it (Express error path). */\n  route?: string;\n  parent?: ContextStore;\n}\n\nconst als = globalSingleton(\"als\", () => new AsyncLocalStorage<ContextStore>());\n\nexport const STORE_KEY: symbol = Symbol.for(\"@tanngo11/log.store\");\n\nexport function runWithStore<T>(fields: Fields, fn: (store: ContextStore) => T): T {\n  const parent = als.getStore();\n  const store: ContextStore = { fields: { ...parent?.fields, ...fields }, parent };\n  return als.run(store, () => fn(store));\n}\n\nexport function withContext<T>(fields: Fields, fn: () => T): T {\n  return runWithStore(fields, () => fn());\n}\n\nexport function currentStore(): ContextStore | undefined {\n  return als.getStore();\n}\n\nexport function getContext(): Fields {\n  return als.getStore()?.fields ?? {};\n}\n\n// Applies to the current context and every enclosing one, so a field added inside a nested\n// withContext/runJob still reaches the request's http.request line.\nexport function addContext(fields: Fields): void {\n  for (let s = als.getStore(); s; s = s.parent) Object.assign(s.fields, fields);\n}\n\n// Sets the error on the store and on enclosing stores that have none yet.\nexport function recordErrorIn(store: ContextStore, err: unknown): void {\n  store.error = err;\n  for (let s = store.parent; s; s = s.parent) if (s.error === undefined) s.error = err;\n}\n\n// Marks the error that the current request/job summary line should carry. Does not write a line.\nexport function recordError(err: unknown): void {\n  const store = als.getStore();\n  if (store) recordErrorIn(store, err);\n}\n\nexport function attachStore(target: object, store: ContextStore): void {\n  (target as Record<symbol, ContextStore>)[STORE_KEY] = store;\n}\n\nexport function storeOf(target: unknown): ContextStore | undefined {\n  if (typeof target !== \"object\" || target === null) return undefined;\n  return (target as Record<symbol, ContextStore | undefined>)[STORE_KEY];\n}\n","// Singletons shared by every copy of this package loaded in the process (ESM and CJS builds,\n// or duplicated installs), so context and dedupe state never split.\nexport function globalSingleton<T>(name: string, make: () => T): T {\n  const key = Symbol.for(`@tanngo11/log.${name}`);\n  const g = globalThis as unknown as Record<symbol, T | undefined>;\n  let value = g[key];\n  if (value === undefined) {\n    value = make();\n    g[key] = value;\n  }\n  return value;\n}\n","// Redaction shared by the logger and the error serializer. The collector redacts again,\n// but it cannot see secrets inside JSON-encoded strings, so the app side must catch them.\n\nexport const DEFAULT_REDACT_KEYS = [\n  \"password\", \"passwd\", \"pwd\", \"passphrase\", \"secret\", \"client_secret\",\n  \"token\", \"access_token\", \"refresh_token\", \"id_token\", \"auth_token\",\n  \"api_key\", \"apikey\", \"access_key\", \"secret_key\", \"private_key\",\n  \"authorization\", \"cookie\", \"set_cookie\", \"session_id\", \"sessionid\",\n  \"credential\", \"credentials\", \"dsn\", \"connection_string\", \"conn_string\", \"jwt\", \"bearer\",\n];\n\n/** Opt-in value patterns for `redactValues`. Not on by default: they can hit ordinary numbers. */\nexport const REDACT_PATTERNS = {\n  /**\n   * Vietnamese mobile numbers: 0912345678, +84912345678, 84912345678, also \"SDT0912345678\". A\n   * hex letter (a-f) on either side rules a match out, so hex ids (a UUID segment such as\n   * 0912345678e0) are left alone.\n   */\n  phoneVN: /(?<![\\dA-Fa-f+])(?:\\+?84|0)[35789]\\d{8}(?![\\dA-Fa-f])/g,\n  /** Visa, Mastercard, Amex, Discover-like card numbers, with optional spaces or dashes. */\n  paymentCard: /(?<!\\d)(?:4\\d{3}|5[1-5]\\d{2}|2[2-7]\\d{2}|3[47]\\d{2}|6(?:011|5\\d{2}))(?:[ -]?\\d{4}){2}[ -]?\\d{1,4}(?!\\d)/g,\n  /** IPv4 addresses. */\n  ipv4: /(?<![\\d.])(?:\\d{1,3}\\.){3}\\d{1,3}(?![\\d.])/g,\n} as const;\n\n// Keys that only describe a secret (count, type, timestamps, flags) stay readable.\nconst SAFE_SUFFIXES = [\"_count\", \"_type\", \"_length\", \"_expires_at\", \"_expires_in\", \"_ttl\", \"_at\", \"_ms\", \"_enabled\"];\n\nexport const REDACTED = \"[REDACTED]\";\n\nexport function toSnakeCase(key: string): string {\n  return key\n    .replace(/([a-z0-9])([A-Z])/g, \"$1_$2\")\n    .replace(/([A-Z]+)([A-Z][a-z])/g, \"$1_$2\")\n    .replace(/[^A-Za-z0-9_]+/g, \"_\")\n    .toLowerCase();\n}\n\nconst URL_CREDENTIALS_RE = /([a-z][a-z0-9+.-]*:\\/\\/)[^\\s/@:\"']+:[^\\s/@\"']+@/gi;\nconst BEARER_RE = /\\bBearer\\s+[A-Za-z0-9._~+/=-]+/gi;\nconst JWT_RE = /\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+/g;\nconst EMAIL_RE = /[A-Za-z0-9._%+-]+@([A-Za-z0-9-]+(?:\\.[A-Za-z0-9-]+)*\\.[A-Za-z]{2,})/g;\n\nexport type KeyPattern = string | RegExp;\n\nexport interface RedactorOptions {\n  /** Extra sensitive keys: names (matched like the defaults) or patterns tested on the snake_case key. */\n  keys?: readonly KeyPattern[];\n  /** Extra value patterns; every match inside any string becomes [REDACTED]. */\n  values?: readonly RegExp[];\n}\n\nexport interface Redactor {\n  isSensitive(key: string): boolean;\n  /** Masks secrets and emails that appear inside free text. */\n  scrub(s: string): string;\n  /** JSON.stringify that redacts sensitive keys at any depth and never throws. */\n  json(value: unknown): string;\n}\n\nfunction globalize(re: RegExp): RegExp {\n  return re.flags.includes(\"g\") ? new RegExp(re.source, re.flags) : new RegExp(re.source, `${re.flags}g`);\n}\n\nexport function createRedactor(opts: RedactorOptions = {}): Redactor {\n  const words = [...DEFAULT_REDACT_KEYS];\n  const keyPatterns: RegExp[] = [];\n  for (const k of opts.keys ?? []) {\n    if (typeof k === \"string\") words.push(toSnakeCase(k));\n    else keyPatterns.push(new RegExp(k.source, k.flags.replace(\"g\", \"\")));\n  }\n  const valuePatterns = (opts.values ?? []).map(globalize);\n\n  const isSensitive = (key: string): boolean => {\n    const k = toSnakeCase(key);\n    if (keyPatterns.some((re) => re.test(k))) return true;\n    if (!words.includes(k) && SAFE_SUFFIXES.some((s) => k.endsWith(s))) return false;\n    return words.some((w) => k === w || k.startsWith(`${w}_`) || k.endsWith(`_${w}`) || k.includes(`_${w}_`));\n  };\n\n  const scrub = (s: string): string => {\n    let out = s\n      .replace(URL_CREDENTIALS_RE, `$1${REDACTED}@`)\n      .replace(BEARER_RE, `Bearer ${REDACTED}`)\n      .replace(JWT_RE, \"[REDACTED_JWT]\")\n      .replace(EMAIL_RE, \"***@$1\");\n    for (const re of valuePatterns) out = out.replace(re, REDACTED);\n    return out;\n  };\n\n  const json = (value: unknown): string => {\n    if (typeof value === \"string\") return value;\n    try {\n      const text = JSON.stringify(value, (key, val: unknown) => {\n        if (key && val !== null && val !== undefined && isSensitive(key)) return REDACTED;\n        if (typeof val === \"bigint\") return val.toString();\n        if (val instanceof Error) return { name: val.name, message: val.message };\n        return val;\n      });\n      return text ?? String(value);\n    } catch {\n      return String(value);\n    }\n  };\n\n  return { isSensitive, scrub, json };\n}\n\nexport const defaultRedactor: Redactor = createRedactor();\n","import { globalSingleton } from \"./global\";\nimport { defaultRedactor } from \"./redact\";\n\nexport interface ErrFields {\n  err_type?: string;\n  err_message?: string;\n  err_code?: string;\n  err_stack?: string;\n  err_cause?: string;\n  /** Database errors (pg): the table and constraint the server reported. */\n  db_table?: string;\n  db_constraint?: string;\n}\n\nconst MAX_CAUSE_DEPTH = 5;\n\nexport function isErrorLike(v: unknown): v is Error {\n  if (v instanceof Error) return true;\n  return (\n    typeof v === \"object\" &&\n    v !== null &&\n    typeof (v as { message?: unknown }).message === \"string\" &&\n    (\"stack\" in v || \"name\" in v)\n  );\n}\n\nfunction errorType(e: Error): string {\n  // pg's DatabaseError keeps the lowercase name \"error\"; its class name says more.\n  if (e.name && e.name !== \"Error\" && e.name !== \"error\") return e.name;\n  const ctor = (e as { constructor?: { name?: string } }).constructor?.name;\n  return ctor && ctor !== \"Object\" ? ctor : \"Error\";\n}\n\nexport function serializeError(err: unknown): ErrFields {\n  if (!isErrorLike(err)) {\n    if (typeof err === \"string\") return { err_type: \"string\", err_message: err };\n    return { err_type: typeof err, err_message: defaultRedactor.json(err) };\n  }\n  const e = err as Error & { code?: unknown; cause?: unknown; table?: unknown; constraint?: unknown };\n  const message = String(e.message ?? \"\");\n  const out: ErrFields = { err_type: errorType(e), err_message: message };\n  if (e.code !== undefined && e.code !== null) out.err_code = String(e.code);\n  out.err_message = cleanMessage(message, out.err_code);\n  if (isSqlState(out.err_code)) {\n    if (typeof e.table === \"string\" && e.table) out.db_table = e.table;\n    if (typeof e.constraint === \"string\" && e.constraint) out.db_constraint = e.constraint;\n  }\n  if (typeof e.stack === \"string\") out.err_stack = replaceOnce(e.stack, message, out.err_message);\n\n  const causes: string[] = [];\n  let cause = e.cause;\n  while (cause !== undefined && cause !== null && causes.length < MAX_CAUSE_DEPTH) {\n    if (isErrorLike(cause)) {\n      const code = (cause as { code?: unknown }).code;\n      const causeCode = code === undefined || code === null ? undefined : String(code);\n      causes.push(`${errorType(cause)}: ${cleanMessage(String(cause.message ?? \"\"), causeCode)}`);\n      cause = (cause as { cause?: unknown }).cause;\n    } else {\n      causes.push(defaultRedactor.json(cause));\n      cause = undefined;\n    }\n  }\n  if (causes.length > 0) out.err_cause = causes.join(\" <- \");\n  return out;\n}\n\n// Postgres SQLSTATE codes: five digits or uppercase letters (23505, 40P01, 25P02).\nfunction isSqlState(code: string | undefined): boolean {\n  return code !== undefined && /^[0-9A-Z]{5}$/.test(code);\n}\n\n// A statement, optionally behind comments or opening parentheses (\"(select ...) union ...\").\nconst SQL_START_RE = /^\\s*(?:\\/\\*[\\s\\S]*?\\*\\/\\s*)*\\(*\\s*(?:select|insert|update|delete|with|create|alter|drop|truncate|lock)\\b/i;\n// Without a SQLSTATE code, the part before \" - \" must also read like SQL, so a message such as\n// \"Update failed - retry later\" stays whole.\nconst SQL_BODY_RE = /[\"`]|\\b(?:from|into|set|values|where|table|returning)\\b/i;\n\n/**\n * knex prefixes every failed query's message with the statement, whatever the driver or error\n * (pg with or without a SQLSTATE, MySQL ER_*, SQLite, \"Connection terminated\"). Drops it.\n */\nfunction cleanMessage(message: string, code: string | undefined): string {\n  const at = message.lastIndexOf(\" - \");\n  if (at === -1 || !SQL_START_RE.test(message)) return message;\n  if (!isSqlState(code) && !SQL_BODY_RE.test(message.slice(0, at))) return message;\n  return stripSql(message);\n}\n\n// V8 renders the stack's first line from the message when .stack is first read. For knex errors\n// that is after the statement was prefixed, so the stack repeats it.\nfunction replaceOnce(text: string, find: string, replacement: string | undefined): string {\n  if (replacement === undefined || find === replacement || find === \"\") return text;\n  const at = text.indexOf(find);\n  return at === -1 ? text : text.slice(0, at) + replacement + text.slice(at + find.length);\n}\n\n/**\n * knex prefixes a failed query's message with the whole statement (\"update ... - deadlock\n * detected\"). A long statement filled err_message and the truncation cut off the server's reason,\n * the only part worth reading. Keeps the reason; the statement never reaches the log. Cuts at the\n * last \" - \": a reason that contains \" - \" loses its start, which is safer than keeping part of a\n * statement that contains one (arithmetic, string literals).\n */\nexport function stripSql(message: string): string {\n  if (!SQL_START_RE.test(message)) return message;\n  const at = message.lastIndexOf(\" - \");\n  return at === -1 ? message : message.slice(at + 3);\n}\n\n/**\n * For errors Koa emits on the inbound socket (strapiServerErrors): the client hung up or sent a\n * malformed request. Not valid for errors in general: knex's pool rejects with Error(\"aborted\")\n * when it is destroyed, and pg or outbound sockets reset with ECONNRESET.\n */\nexport function isClientDisconnect(err: unknown): boolean {\n  const e = err as { code?: unknown; message?: unknown } | null;\n  const code = typeof e?.code === \"string\" ? e.code : \"\";\n  return (\n    code === \"ECONNRESET\" ||\n    code === \"ECONNABORTED\" ||\n    code === \"EPIPE\" ||\n    code === \"ERR_STREAM_PREMATURE_CLOSE\" ||\n    code.startsWith(\"HPE_\") ||\n    e?.message === \"aborted\"\n  );\n}\n\nconst logged = globalSingleton(\"logged\", () => new WeakSet<object>());\n\n// Marks an error as already written, so a later boundary (e.g. Next's onRequestError)\n// does not log it a second time.\nexport function markLogged(err: unknown): void {\n  if (typeof err === \"object\" && err !== null) logged.add(err);\n}\n\nexport function isLogged(err: unknown): boolean {\n  return typeof err === \"object\" && err !== null && logged.has(err);\n}\n","import { isErrorLike, serializeError } from \"./error\";\nimport type { Level } from \"./levels\";\nimport { REDACTED, toSnakeCase, type Redactor } from \"./redact\";\n\nexport { DEFAULT_REDACT_KEYS, toSnakeCase } from \"./redact\";\n\n/** Final per-field hook: return a replacement, or undefined to drop the field. */\nexport type RedactHook = (key: string, value: Primitive) => unknown;\n\nexport type Fields = Record<string, unknown>;\nexport type Primitive = string | number | boolean | null;\nexport type LogRecord = Record<string, Primitive>;\n\nexport interface NormalizeOptions {\n  snakeCase: boolean;\n  redactor: Redactor;\n  hook?: RedactHook;\n}\n\n// Fields the redact hook never sees, so every line keeps its level, message and event.\nconst HOOK_EXEMPT = new Set([\"level\", \"message\", \"event\"]);\n\n// Keys owned by Vector (overwritten or deleted on ingest) or by the logger itself.\nexport const RESERVED_KEYS = new Set([\n  \"project\", \"service\", \"vps\", \"version\", \"container_name\", \"container_id\", \"image\", \"stream\",\n  \"_timestamp\", \"label\", \"host\", \"source_type\", \"msg\", \"lvl\", \"severity\", \"level\", \"message\",\n]);\n\nexport const MAX_LINE_BYTES = 16000;\nconst MAX_MESSAGE = 500;\nconst MAX_STACK = 4000;\nconst MAX_STRING = 1000;\nconst MAX_DEPTH = 3;\nconst TRUNCATED = \"…[truncated]\";\n\n// Fields kept when a line is too large.\nconst KEEP_ON_SHRINK = new Set([\n  \"level\", \"message\", \"event\", \"request_id\", \"trace_id\", \"span_id\", \"job_name\", \"job_id\", \"job_attempt\",\n  \"user_id\", \"tenant_id\", \"err_type\", \"err_message\", \"err_code\",\n]);\n\nexport function stripUrl(url: string): string {\n  const noQuery = url.split(/[?#]/, 1)[0] ?? \"\";\n  return noQuery.replace(/^([a-z][a-z0-9+.-]*:\\/\\/)[^/@\\s]*@/i, \"$1\");\n}\n\nexport function truncate(s: string, max: number): string {\n  return s.length > max ? s.slice(0, max - TRUNCATED.length) + TRUNCATED : s;\n}\n\nfunction isPlainObject(v: unknown): v is Fields {\n  if (typeof v !== \"object\" || v === null) return false;\n  const proto = Object.getPrototypeOf(v);\n  return proto === Object.prototype || proto === null;\n}\n\nfunction isUrlKey(key: string): boolean {\n  return key === \"http_path\" || key === \"http_url\" || key.endsWith(\"_url\");\n}\n\nfunction flattenInto(out: LogRecord, prefix: string, obj: Fields, depth: number, opts: NormalizeOptions): void {\n  for (const [rawKey, value] of Object.entries(obj)) {\n    const key = opts.snakeCase ? toSnakeCase(rawKey) : rawKey;\n    const full = prefix ? `${prefix}_${key}` : key;\n    if (value === undefined || typeof value === \"function\" || typeof value === \"symbol\") continue;\n    if (value !== null && (opts.redactor.isSensitive(rawKey) || opts.redactor.isSensitive(full))) {\n      out[full] = REDACTED;\n      continue;\n    }\n    if (value === null || typeof value === \"string\" || typeof value === \"boolean\") {\n      out[full] = value;\n    } else if (typeof value === \"number\") {\n      out[full] = Number.isFinite(value) ? value : String(value);\n    } else if (typeof value === \"bigint\") {\n      out[full] = value.toString();\n    } else if (value instanceof Date) {\n      out[full] = Number.isNaN(value.getTime()) ? \"Invalid Date\" : value.toISOString();\n    } else if (isErrorLike(value)) {\n      out[full] = `${value.name}: ${value.message}`;\n    } else if (isPlainObject(value) && depth < MAX_DEPTH - 1) {\n      flattenInto(out, full, value, depth + 1, opts);\n    } else {\n      // Arrays, deep objects, class instances: stringified with sensitive keys redacted.\n      out[full] = opts.redactor.json(value);\n    }\n  }\n}\n\n// Correlation ids are opaque tokens: value patterns such as phoneVN can match inside a hex\n// segment and break the join between services, so a well-formed id is never scrubbed.\nconst ID_VALUE_RE = /^[A-Za-z0-9._:-]{1,128}$/;\n\nfunction isIdKey(key: string): boolean {\n  return key === \"request_id\" || key === \"trace_id\" || key === \"span_id\" || key.endsWith(\"_request_id\");\n}\n\nfunction finalize(key: string, value: Primitive, opts: NormalizeOptions): Primitive {\n  if (typeof value !== \"string\") return value;\n  if (isIdKey(key) && ID_VALUE_RE.test(value)) return value;\n  const v = opts.redactor.scrub(isUrlKey(key) ? stripUrl(value) : value);\n  return truncate(v, key === \"err_stack\" ? MAX_STACK : MAX_STRING);\n}\n\nexport function buildRecord(\n  level: Level,\n  message: unknown,\n  sources: (Fields | undefined)[],\n  opts: NormalizeOptions,\n): LogRecord {\n  const merged: Fields = {};\n  for (const source of sources) if (source) Object.assign(merged, source);\n\n  let err: unknown;\n  if (merged.err !== undefined && merged.err !== null) {\n    err = merged.err;\n    delete merged.err;\n  } else if (isErrorLike(merged.error)) {\n    err = merged.error;\n    delete merged.error;\n  }\n\n  const flat: LogRecord = {};\n  flattenInto(flat, \"\", merged, 0, opts);\n  if (err !== undefined) Object.assign(flat, serializeError(err));\n\n  const text = typeof message === \"string\" ? message : opts.redactor.json(message);\n  const out: LogRecord = { level, message: truncate(opts.redactor.scrub(text), MAX_MESSAGE) };\n  for (const [k, v] of Object.entries(flat)) {\n    const key = RESERVED_KEYS.has(k) ? `app_${k}` : k;\n    let value = finalize(key, v, opts);\n    if (opts.hook && !HOOK_EXEMPT.has(key)) {\n      const replaced = opts.hook(key, value);\n      if (replaced === undefined) continue;\n      value = typeof replaced === \"object\" && replaced !== null ? opts.redactor.json(replaced) : (replaced as Primitive);\n    }\n    out[key] = value;\n  }\n  return out;\n}\n\nfunction byteLength(s: string): number {\n  // UTF-8 uses at most 3 bytes per UTF-16 code unit: skip encoding short lines.\n  if (s.length * 3 <= MAX_LINE_BYTES) return s.length;\n  return new TextEncoder().encode(s).length;\n}\n\nexport function serializeRecord(record: LogRecord): string {\n  const line = JSON.stringify(record);\n  if (byteLength(line) <= MAX_LINE_BYTES) return line;\n  const small: LogRecord = {};\n  for (const [k, v] of Object.entries(record)) {\n    if (KEEP_ON_SHRINK.has(k) || k.startsWith(\"http_\")) small[k] = v;\n  }\n  small.log_truncated = true;\n  return JSON.stringify(small);\n}\n","// No imports: this module is shared with the edge entry (next-edge).\nexport const REQUEST_ID_RE = /^[A-Za-z0-9._-]{1,64}$/;\nconst TRACEPARENT_RE = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/;\n\nexport function newRequestId(): string {\n  return globalThis.crypto.randomUUID();\n}\n\nfunction first(header?: string | string[] | null): string | undefined {\n  return Array.isArray(header) ? header[0] : (header ?? undefined);\n}\n\nexport function resolveRequestId(header?: string | string[] | null): string {\n  const value = first(header);\n  return value && REQUEST_ID_RE.test(value) ? value : newRequestId();\n}\n\nexport function parseTraceparent(header?: string | string[] | null): { trace_id: string; span_id: string } | undefined {\n  const value = first(header)?.trim().toLowerCase();\n  const m = value ? TRACEPARENT_RE.exec(value) : null;\n  if (!m) return undefined;\n  const [, version, traceId, spanId] = m as unknown as [string, string, string, string];\n  if (version === \"ff\" || /^0+$/.test(traceId) || /^0+$/.test(spanId)) return undefined;\n  return { trace_id: traceId, span_id: spanId };\n}\n","import { getContext } from \"./context\";\nimport { markLogged, serializeError } from \"./error\";\nimport type { Logger } from \"./logger\";\nimport { stripUrl, type Fields } from \"./normalize\";\nimport { parseTraceparent, resolveRequestId } from \"./request-id\";\n\nexport { newRequestId, parseTraceparent, REQUEST_ID_RE, resolveRequestId } from \"./request-id\";\n\nexport type HeaderSource = Headers | Record<string, string | string[] | undefined>;\n\nfunction header(headers: HeaderSource, name: string): string | string[] | undefined {\n  if (typeof (headers as Headers).get === \"function\") return (headers as Headers).get(name) ?? undefined;\n  return (headers as Record<string, string | string[] | undefined>)[name];\n}\n\nexport function requestContextFields(headers: HeaderSource): { request_id: string; trace_id?: string; span_id?: string } {\n  const out: { request_id: string; trace_id?: string; span_id?: string } = {\n    request_id: resolveRequestId(header(headers, \"x-request-id\")),\n  };\n  const tp = parseTraceparent(header(headers, \"traceparent\"));\n  if (tp) Object.assign(out, tp);\n  return out;\n}\n\n// Headers to forward to services we own, so their logs share request_id / trace_id.\nexport function propagationHeaders(): Record<string, string> {\n  const ctx = getContext();\n  const out: Record<string, string> = {};\n  if (typeof ctx.request_id === \"string\") out[\"x-request-id\"] = ctx.request_id;\n  if (typeof ctx.trace_id === \"string\" && typeof ctx.span_id === \"string\") {\n    out.traceparent = `00-${ctx.trace_id}-${ctx.span_id}-01`;\n  }\n  return out;\n}\n\nexport const DEFAULT_SKIP_PATHS: (string | RegExp)[] = [\n  // Also under a prefix such as /api/v1/health.\n  /(^|\\/)(health|healthz|ready|readyz|livez)\\/?$/,\n  \"/favicon.ico\",\n  /^\\/_next\\/static\\//,\n];\n\nexport interface HttpLogOptions {\n  skipPaths?: (string | RegExp)[];\n}\n\nexport interface HttpRequestInfo {\n  method: string;\n  route?: string;\n  path: string;\n  status: number;\n  duration_ms?: number;\n  err?: unknown;\n  fields?: Fields;\n}\n\nexport function shouldSkip(method: string, path: string, skipPaths: (string | RegExp)[] = DEFAULT_SKIP_PATHS): boolean {\n  if (method.toUpperCase() === \"OPTIONS\") return true;\n  const p = stripUrl(path);\n  return skipPaths.some((s) => (typeof s === \"string\" ? p === s : s.test(p)));\n}\n\n// Writes the one `http.request` summary line for an inbound request. Skipped paths are still\n// logged when they fail with a 5xx, so a failing health check stays visible.\nexport function logHttpRequest(log: Logger, info: HttpRequestInfo, opts: HttpLogOptions = {}): void {\n  if (info.status < 500 && shouldSkip(info.method, info.path, opts.skipPaths)) return;\n  // The level follows the status only. An error's shape cannot tell a client hang-up apart:\n  // knex's pool (tarn) rejects in-flight queries with Error(\"aborted\") when it is destroyed on\n  // shutdown, and a pg or outbound socket reset is ECONNRESET too. Both are server-side failures.\n  const level = info.status >= 500 ? \"error\" : info.status >= 400 ? \"warn\" : \"info\";\n  const path = stripUrl(info.path);\n  const errFields: Fields = {};\n  if (info.err !== undefined && info.err !== null) {\n    Object.assign(errFields, serializeError(info.err));\n    if (info.status < 500) delete errFields.err_stack;\n    markLogged(info.err);\n  }\n  // Route templates keep the message bounded; the raw path would make one message per URL.\n  const message = info.route ? `${info.method} ${info.route} ${info.status}` : `${info.method} ${info.status}`;\n  log[level](message, {\n    ...info.fields,\n    event: \"http.request\",\n    http_method: info.method,\n    http_route: info.route,\n    http_path: path,\n    http_status: info.status,\n    duration_ms: info.duration_ms === undefined ? undefined : Math.round(info.duration_ms),\n    ...errFields,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,8BAAkC;;;ACE3B,SAAS,gBAAmB,MAAc,MAAkB;AACjE,QAAM,MAAM,uBAAO,IAAI,iBAAiB,IAAI,EAAE;AAC9C,QAAM,IAAI;AACV,MAAI,QAAQ,EAAE,GAAG;AACjB,MAAI,UAAU,QAAW;AACvB,YAAQ,KAAK;AACb,MAAE,GAAG,IAAI;AAAA,EACX;AACA,SAAO;AACT;;;ADCA,IAAM,MAAM,gBAAgB,OAAO,MAAM,IAAI,0CAAgC,CAAC;AAEvE,IAAM,YAAoB,uBAAO,IAAI,qBAAqB;AAE1D,SAAS,aAAgB,QAAgB,IAAmC;AACjF,QAAM,SAAS,IAAI,SAAS;AAC5B,QAAM,QAAsB,EAAE,QAAQ,EAAE,GAAG,QAAQ,QAAQ,GAAG,OAAO,GAAG,OAAO;AAC/E,SAAO,IAAI,IAAI,OAAO,MAAM,GAAG,KAAK,CAAC;AACvC;AAqBO,SAAS,cAAc,OAAqB,KAAoB;AACrE,QAAM,QAAQ;AACd,WAAS,IAAI,MAAM,QAAQ,GAAG,IAAI,EAAE,OAAQ,KAAI,EAAE,UAAU,OAAW,GAAE,QAAQ;AACnF;AAQO,SAAS,YAAY,QAAgB,OAA2B;AACrE,EAAC,OAAwC,SAAS,IAAI;AACxD;AAEO,SAAS,QAAQ,QAA2C;AACjE,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,SAAQ,OAAoD,SAAS;AACvE;;;AExDO,IAAM,sBAAsB;AAAA,EACjC;AAAA,EAAY;AAAA,EAAU;AAAA,EAAO;AAAA,EAAc;AAAA,EAAU;AAAA,EACrD;AAAA,EAAS;AAAA,EAAgB;AAAA,EAAiB;AAAA,EAAY;AAAA,EACtD;AAAA,EAAW;AAAA,EAAU;AAAA,EAAc;AAAA,EAAc;AAAA,EACjD;AAAA,EAAiB;AAAA,EAAU;AAAA,EAAc;AAAA,EAAc;AAAA,EACvD;AAAA,EAAc;AAAA,EAAe;AAAA,EAAO;AAAA,EAAqB;AAAA,EAAe;AAAA,EAAO;AACjF;AAiBA,IAAM,gBAAgB,CAAC,UAAU,SAAS,WAAW,eAAe,eAAe,QAAQ,OAAO,OAAO,UAAU;AAE5G,IAAM,WAAW;AAEjB,SAAS,YAAY,KAAqB;AAC/C,SAAO,IACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,yBAAyB,OAAO,EACxC,QAAQ,mBAAmB,GAAG,EAC9B,YAAY;AACjB;AAEA,IAAM,qBAAqB;AAC3B,IAAM,YAAY;AAClB,IAAM,SAAS;AACf,IAAM,WAAW;AAmBjB,SAAS,UAAU,IAAoB;AACrC,SAAO,GAAG,MAAM,SAAS,GAAG,IAAI,IAAI,OAAO,GAAG,QAAQ,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,QAAQ,GAAG,GAAG,KAAK,GAAG;AACxG;AAEO,SAAS,eAAe,OAAwB,CAAC,GAAa;AACnE,QAAM,QAAQ,CAAC,GAAG,mBAAmB;AACrC,QAAM,cAAwB,CAAC;AAC/B,aAAW,KAAK,KAAK,QAAQ,CAAC,GAAG;AAC/B,QAAI,OAAO,MAAM,SAAU,OAAM,KAAK,YAAY,CAAC,CAAC;AAAA,QAC/C,aAAY,KAAK,IAAI,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,KAAK,EAAE,CAAC,CAAC;AAAA,EACtE;AACA,QAAM,iBAAiB,KAAK,UAAU,CAAC,GAAG,IAAI,SAAS;AAEvD,QAAM,cAAc,CAAC,QAAyB;AAC5C,UAAM,IAAI,YAAY,GAAG;AACzB,QAAI,YAAY,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,EAAG,QAAO;AACjD,QAAI,CAAC,MAAM,SAAS,CAAC,KAAK,cAAc,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAG,QAAO;AAC3E,WAAO,MAAM,KAAK,CAAC,MAAM,MAAM,KAAK,EAAE,WAAW,GAAG,CAAC,GAAG,KAAK,EAAE,SAAS,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,GAAG,CAAC;AAAA,EAC1G;AAEA,QAAM,QAAQ,CAAC,MAAsB;AACnC,QAAI,MAAM,EACP,QAAQ,oBAAoB,KAAK,QAAQ,GAAG,EAC5C,QAAQ,WAAW,UAAU,QAAQ,EAAE,EACvC,QAAQ,QAAQ,gBAAgB,EAChC,QAAQ,UAAU,QAAQ;AAC7B,eAAW,MAAM,cAAe,OAAM,IAAI,QAAQ,IAAI,QAAQ;AAC9D,WAAO;AAAA,EACT;AAEA,QAAM,OAAO,CAAC,UAA2B;AACvC,QAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAI;AACF,YAAM,OAAO,KAAK,UAAU,OAAO,CAAC,KAAK,QAAiB;AACxD,YAAI,OAAO,QAAQ,QAAQ,QAAQ,UAAa,YAAY,GAAG,EAAG,QAAO;AACzE,YAAI,OAAO,QAAQ,SAAU,QAAO,IAAI,SAAS;AACjD,YAAI,eAAe,MAAO,QAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ;AACxE,eAAO;AAAA,MACT,CAAC;AACD,aAAO,QAAQ,OAAO,KAAK;AAAA,IAC7B,QAAQ;AACN,aAAO,OAAO,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,SAAO,EAAE,aAAa,OAAO,KAAK;AACpC;AAEO,IAAM,kBAA4B,eAAe;;;AC9FxD,IAAM,kBAAkB;AAEjB,SAAS,YAAY,GAAwB;AAClD,MAAI,aAAa,MAAO,QAAO;AAC/B,SACE,OAAO,MAAM,YACb,MAAM,QACN,OAAQ,EAA4B,YAAY,aAC/C,WAAW,KAAK,UAAU;AAE/B;AAEA,SAAS,UAAU,GAAkB;AAEnC,MAAI,EAAE,QAAQ,EAAE,SAAS,WAAW,EAAE,SAAS,QAAS,QAAO,EAAE;AACjE,QAAM,OAAQ,EAA0C,aAAa;AACrE,SAAO,QAAQ,SAAS,WAAW,OAAO;AAC5C;AAEO,SAAS,eAAe,KAAyB;AACtD,MAAI,CAAC,YAAY,GAAG,GAAG;AACrB,QAAI,OAAO,QAAQ,SAAU,QAAO,EAAE,UAAU,UAAU,aAAa,IAAI;AAC3E,WAAO,EAAE,UAAU,OAAO,KAAK,aAAa,gBAAgB,KAAK,GAAG,EAAE;AAAA,EACxE;AACA,QAAM,IAAI;AACV,QAAM,UAAU,OAAO,EAAE,WAAW,EAAE;AACtC,QAAM,MAAiB,EAAE,UAAU,UAAU,CAAC,GAAG,aAAa,QAAQ;AACtE,MAAI,EAAE,SAAS,UAAa,EAAE,SAAS,KAAM,KAAI,WAAW,OAAO,EAAE,IAAI;AACzE,MAAI,cAAc,aAAa,SAAS,IAAI,QAAQ;AACpD,MAAI,WAAW,IAAI,QAAQ,GAAG;AAC5B,QAAI,OAAO,EAAE,UAAU,YAAY,EAAE,MAAO,KAAI,WAAW,EAAE;AAC7D,QAAI,OAAO,EAAE,eAAe,YAAY,EAAE,WAAY,KAAI,gBAAgB,EAAE;AAAA,EAC9E;AACA,MAAI,OAAO,EAAE,UAAU,SAAU,KAAI,YAAY,YAAY,EAAE,OAAO,SAAS,IAAI,WAAW;AAE9F,QAAM,SAAmB,CAAC;AAC1B,MAAI,QAAQ,EAAE;AACd,SAAO,UAAU,UAAa,UAAU,QAAQ,OAAO,SAAS,iBAAiB;AAC/E,QAAI,YAAY,KAAK,GAAG;AACtB,YAAM,OAAQ,MAA6B;AAC3C,YAAM,YAAY,SAAS,UAAa,SAAS,OAAO,SAAY,OAAO,IAAI;AAC/E,aAAO,KAAK,GAAG,UAAU,KAAK,CAAC,KAAK,aAAa,OAAO,MAAM,WAAW,EAAE,GAAG,SAAS,CAAC,EAAE;AAC1F,cAAS,MAA8B;AAAA,IACzC,OAAO;AACL,aAAO,KAAK,gBAAgB,KAAK,KAAK,CAAC;AACvC,cAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,OAAO,SAAS,EAAG,KAAI,YAAY,OAAO,KAAK,MAAM;AACzD,SAAO;AACT;AAGA,SAAS,WAAW,MAAmC;AACrD,SAAO,SAAS,UAAa,gBAAgB,KAAK,IAAI;AACxD;AAGA,IAAM,eAAe;AAGrB,IAAM,cAAc;AAMpB,SAAS,aAAa,SAAiB,MAAkC;AACvE,QAAM,KAAK,QAAQ,YAAY,KAAK;AACpC,MAAI,OAAO,MAAM,CAAC,aAAa,KAAK,OAAO,EAAG,QAAO;AACrD,MAAI,CAAC,WAAW,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,MAAM,GAAG,EAAE,CAAC,EAAG,QAAO;AACzE,SAAO,SAAS,OAAO;AACzB;AAIA,SAAS,YAAY,MAAc,MAAc,aAAyC;AACxF,MAAI,gBAAgB,UAAa,SAAS,eAAe,SAAS,GAAI,QAAO;AAC7E,QAAM,KAAK,KAAK,QAAQ,IAAI;AAC5B,SAAO,OAAO,KAAK,OAAO,KAAK,MAAM,GAAG,EAAE,IAAI,cAAc,KAAK,MAAM,KAAK,KAAK,MAAM;AACzF;AASO,SAAS,SAAS,SAAyB;AAChD,MAAI,CAAC,aAAa,KAAK,OAAO,EAAG,QAAO;AACxC,QAAM,KAAK,QAAQ,YAAY,KAAK;AACpC,SAAO,OAAO,KAAK,UAAU,QAAQ,MAAM,KAAK,CAAC;AACnD;AAoBA,IAAM,SAAS,gBAAgB,UAAU,MAAM,oBAAI,QAAgB,CAAC;AAI7D,SAAS,WAAW,KAAoB;AAC7C,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO,IAAI,GAAG;AAC7D;;;AC5FO,SAAS,SAAS,KAAqB;AAC5C,QAAM,UAAU,IAAI,MAAM,QAAQ,CAAC,EAAE,CAAC,KAAK;AAC3C,SAAO,QAAQ,QAAQ,uCAAuC,IAAI;AACpE;;;AC3CO,IAAM,gBAAgB;AAC7B,IAAM,iBAAiB;AAEhB,SAAS,eAAuB;AACrC,SAAO,WAAW,OAAO,WAAW;AACtC;AAEA,SAAS,MAAMA,SAAuD;AACpE,SAAO,MAAM,QAAQA,OAAM,IAAIA,QAAO,CAAC,IAAKA,WAAU;AACxD;AAEO,SAAS,iBAAiBA,SAA2C;AAC1E,QAAM,QAAQ,MAAMA,OAAM;AAC1B,SAAO,SAAS,cAAc,KAAK,KAAK,IAAI,QAAQ,aAAa;AACnE;AAEO,SAAS,iBAAiBA,SAAsF;AACrH,QAAM,QAAQ,MAAMA,OAAM,GAAG,KAAK,EAAE,YAAY;AAChD,QAAM,IAAI,QAAQ,eAAe,KAAK,KAAK,IAAI;AAC/C,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,CAAC,EAAE,SAAS,SAAS,MAAM,IAAI;AACrC,MAAI,YAAY,QAAQ,OAAO,KAAK,OAAO,KAAK,OAAO,KAAK,MAAM,EAAG,QAAO;AAC5E,SAAO,EAAE,UAAU,SAAS,SAAS,OAAO;AAC9C;;;ACdA,SAAS,OAAO,SAAuB,MAA6C;AAClF,MAAI,OAAQ,QAAoB,QAAQ,WAAY,QAAQ,QAAoB,IAAI,IAAI,KAAK;AAC7F,SAAQ,QAA0D,IAAI;AACxE;AAEO,SAAS,qBAAqB,SAAoF;AACvH,QAAM,MAAmE;AAAA,IACvE,YAAY,iBAAiB,OAAO,SAAS,cAAc,CAAC;AAAA,EAC9D;AACA,QAAM,KAAK,iBAAiB,OAAO,SAAS,aAAa,CAAC;AAC1D,MAAI,GAAI,QAAO,OAAO,KAAK,EAAE;AAC7B,SAAO;AACT;AAaO,IAAM,qBAA0C;AAAA;AAAA,EAErD;AAAA,EACA;AAAA,EACA;AACF;AAgBO,SAAS,WAAW,QAAgB,MAAc,YAAiC,oBAA6B;AACrH,MAAI,OAAO,YAAY,MAAM,UAAW,QAAO;AAC/C,QAAM,IAAI,SAAS,IAAI;AACvB,SAAO,UAAU,KAAK,CAAC,MAAO,OAAO,MAAM,WAAW,MAAM,IAAI,EAAE,KAAK,CAAC,CAAE;AAC5E;AAIO,SAAS,eAAe,KAAa,MAAuB,OAAuB,CAAC,GAAS;AAClG,MAAI,KAAK,SAAS,OAAO,WAAW,KAAK,QAAQ,KAAK,MAAM,KAAK,SAAS,EAAG;AAI7E,QAAM,QAAQ,KAAK,UAAU,MAAM,UAAU,KAAK,UAAU,MAAM,SAAS;AAC3E,QAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,QAAM,YAAoB,CAAC;AAC3B,MAAI,KAAK,QAAQ,UAAa,KAAK,QAAQ,MAAM;AAC/C,WAAO,OAAO,WAAW,eAAe,KAAK,GAAG,CAAC;AACjD,QAAI,KAAK,SAAS,IAAK,QAAO,UAAU;AACxC,eAAW,KAAK,GAAG;AAAA,EACrB;AAEA,QAAM,UAAU,KAAK,QAAQ,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,KAAK,MAAM,IAAI,KAAK,MAAM;AAC1G,MAAI,KAAK,EAAE,SAAS;AAAA,IAClB,GAAG,KAAK;AAAA,IACR,OAAO;AAAA,IACP,aAAa,KAAK;AAAA,IAClB,YAAY,KAAK;AAAA,IACjB,WAAW;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK,gBAAgB,SAAY,SAAY,KAAK,MAAM,KAAK,WAAW;AAAA,IACrF,GAAG;AAAA,EACL,CAAC;AACH;;;APpFA,SAAS,UAAU,SAA6B,MAAuB;AACrE,SAAO,GAAG,WAAW,EAAE,GAAG,OAAO,IAAI,CAAC,MAAM;AAC9C;AAIA,SAAS,aAAa,KAA2B,OAA2B;AAC1E,MAAI;AACJ,SAAO,eAAe,KAAK,SAAS;AAAA,IAClC,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,KAAK,MAAM;AAAA,IACX,KAAK,CAAC,UAA0C;AAC9C,cAAQ;AACR,UAAI,OAAO,SAAS,OAAW,OAAM,QAAQ,UAAU,IAAI,SAAS,MAAM,IAAI;AAAA,IAChF;AAAA,EACF,CAAC;AACH;AAGO,SAAS,cAAc,KAAa,OAAuB,CAAC,GAAmB;AACpF,SAAO,CAAC,KAAK,KAAK,SAAS;AACzB,UAAM,MAAM,qBAAqB,IAAI,OAAO;AAC5C,QAAI,UAAU,gBAAgB,IAAI,UAAU;AAC5C,UAAM,QAAQ,YAAY,IAAI;AAC9B,iBAAa,KAAK,CAAC,UAAU;AAC3B,kBAAY,KAAK,KAAK;AACtB,mBAAa,KAAK,KAAK;AACvB,UAAI,OAAO;AACX,YAAM,SAAS,MAAM;AACnB,YAAI,KAAM;AACV,eAAO;AACP;AAAA,UACE;AAAA,UACA;AAAA,YACE,QAAQ,IAAI;AAAA,YACZ,OAAO,MAAM;AAAA,YACb,MAAM,IAAI;AAAA,YACV,QAAQ,IAAI,oBAAoB,IAAI,cAAc,IAAI,aAAa;AAAA,YACnE,aAAa,YAAY,IAAI,IAAI;AAAA,YACjC,KAAK,MAAM;AAAA,YACX,QAAQ,MAAM;AAAA,UAChB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,UAAI,KAAK,UAAU,MAAM;AACzB,UAAI,KAAK,SAAS,MAAM;AACxB,WAAK;AAAA,IACP,CAAC;AAAA,EACH;AACF;AAGO,SAAS,gBAAqC;AACnD,SAAO,CAAC,KAAK,MAAM,KAAK,SAAS;AAC/B,UAAM,QAAQ,QAAQ,GAAG;AACzB,QAAI,MAAO,eAAc,OAAO,GAAG;AACnC,SAAK,GAAG;AAAA,EACV;AACF;","names":["header"]}

package/dist/express.d.cts

@@ -1,6 +1,6 @@
 import { ErrorRequestHandler, RequestHandler } from 'express';
-import { H as HttpLogOptions } from './http-BQJkHBwQ.cjs';
-import { L as Logger } from './logger-3Co9eVJf.cjs';
+import { H as HttpLogOptions } from './http-eeog5tR8.cjs';
+import { L as Logger } from './logger-CtlC9SUE.cjs';
 
 /** Mount before routes. Opens the request context and writes the http.request line. */
 declare function requestLogger(log: Logger, opts?: HttpLogOptions): RequestHandler;

package/dist/express.d.ts

@@ -1,6 +1,6 @@
 import { ErrorRequestHandler, RequestHandler } from 'express';
-import { H as HttpLogOptions } from './http-44ztBSXk.js';
-import { L as Logger } from './logger-3Co9eVJf.js';
+import { H as HttpLogOptions } from './http-Dp6Qtr9M.js';
+import { L as Logger } from './logger-CtlC9SUE.js';
 
 /** Mount before routes. Opens the request context and writes the http.request line. */
 declare function requestLogger(log: Logger, opts?: HttpLogOptions): RequestHandler;

package/dist/express.js

@@ -1,10 +1,10 @@
 import {
   errorRecorder,
   requestLogger
-} from "./chunk-UOIJCSP5.js";
-import "./chunk-AF4YR4Y4.js";
+} from "./chunk-EZCIMEVL.js";
+import "./chunk-BFMFXDIJ.js";
 import "./chunk-KLBL7QEN.js";
-import "./chunk-UDS6S22P.js";
+import "./chunk-JKCR57WJ.js";
 export {
   errorRecorder,
   requestLogger

package/dist/fastify.cjs

@@ -156,19 +156,22 @@ function serializeError(err) {
     return { err_type: typeof err, err_message: defaultRedactor.json(err) };
   }
   const e = err;
-  const out = { err_type: errorType(e), err_message: String(e.message ?? "") };
+  const message = String(e.message ?? "");
+  const out = { err_type: errorType(e), err_message: message };
   if (e.code !== void 0 && e.code !== null) out.err_code = String(e.code);
+  out.err_message = cleanMessage(message, out.err_code);
   if (isSqlState(out.err_code)) {
-    out.err_message = stripSql(out.err_message ?? "");
     if (typeof e.table === "string" && e.table) out.db_table = e.table;
     if (typeof e.constraint === "string" && e.constraint) out.db_constraint = e.constraint;
   }
-  if (typeof e.stack === "string") out.err_stack = e.stack;
+  if (typeof e.stack === "string") out.err_stack = replaceOnce(e.stack, message, out.err_message);
   const causes = [];
   let cause = e.cause;
   while (cause !== void 0 && cause !== null && causes.length < MAX_CAUSE_DEPTH) {
     if (isErrorLike(cause)) {
-      causes.push(`${errorType(cause)}: ${cause.message}`);
+      const code = cause.code;
+      const causeCode = code === void 0 || code === null ? void 0 : String(code);
+      causes.push(`${errorType(cause)}: ${cleanMessage(String(cause.message ?? ""), causeCode)}`);
       cause = cause.cause;
     } else {
       causes.push(defaultRedactor.json(cause));
@@ -181,17 +184,24 @@ function serializeError(err) {
 function isSqlState(code) {
   return code !== void 0 && /^[0-9A-Z]{5}$/.test(code);
 }
-var SQL_START_RE = /^\s*(?:select|insert|update|delete|with|create|alter|drop|truncate|lock)\b/i;
+var SQL_START_RE = /^\s*(?:\/\*[\s\S]*?\*\/\s*)*\(*\s*(?:select|insert|update|delete|with|create|alter|drop|truncate|lock)\b/i;
+var SQL_BODY_RE = /["`]|\b(?:from|into|set|values|where|table|returning)\b/i;
+function cleanMessage(message, code) {
+  const at = message.lastIndexOf(" - ");
+  if (at === -1 || !SQL_START_RE.test(message)) return message;
+  if (!isSqlState(code) && !SQL_BODY_RE.test(message.slice(0, at))) return message;
+  return stripSql(message);
+}
+function replaceOnce(text, find, replacement) {
+  if (replacement === void 0 || find === replacement || find === "") return text;
+  const at = text.indexOf(find);
+  return at === -1 ? text : text.slice(0, at) + replacement + text.slice(at + find.length);
+}
 function stripSql(message) {
   if (!SQL_START_RE.test(message)) return message;
   const at = message.lastIndexOf(" - ");
   return at === -1 ? message : message.slice(at + 3);
 }
-function isClientDisconnect(err) {
-  const e = err;
-  const code = typeof e?.code === "string" ? e.code : "";
-  return code === "ECONNRESET" || code === "ECONNABORTED" || code === "EPIPE" || code === "ERR_STREAM_PREMATURE_CLOSE" || code.startsWith("HPE_") || e?.message === "aborted";
-}
 var logged = globalSingleton("logged", () => /* @__PURE__ */ new WeakSet());
 function markLogged(err) {
   if (typeof err === "object" && err !== null) logged.add(err);
@@ -251,15 +261,12 @@ function shouldSkip(method, path, skipPaths = DEFAULT_SKIP_PATHS) {
 }
 function logHttpRequest(log, info, opts = {}) {
   if (info.status < 500 && shouldSkip(info.method, info.path, opts.skipPaths)) return;
-  const hasErr = info.err !== void 0 && info.err !== null;
-  const clientGone = hasErr && isClientDisconnect(info.err);
-  const level = info.status >= 500 && !clientGone ? "error" : info.status >= 400 ? "warn" : "info";
+  const level = info.status >= 500 ? "error" : info.status >= 400 ? "warn" : "info";
   const path = stripUrl(info.path);
   const errFields = {};
-  if (hasErr) {
+  if (info.err !== void 0 && info.err !== null) {
     Object.assign(errFields, serializeError(info.err));
-    if (info.status < 500 || clientGone) delete errFields.err_stack;
-    if (clientGone) errFields.client_disconnect = true;
+    if (info.status < 500) delete errFields.err_stack;
     markLogged(info.err);
   }
   const message = info.route ? `${info.method} ${info.route} ${info.status}` : `${info.method} ${info.status}`;

package/dist/fastify.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/fastify.ts","../src/context.ts","../src/global.ts","../src/redact.ts","../src/error.ts","../src/normalize.ts","../src/request-id.ts","../src/http.ts"],"sourcesContent":["import type { FastifyPluginCallback, FastifyRequest } from \"fastify\";\nimport { attachStore, recordErrorIn, runWithStore, storeOf } from \"./context\";\nimport { logHttpRequest, requestContextFields, type HttpLogOptions } from \"./http\";\nimport type { Logger } from \"./logger\";\n\nexport interface FastifyLoggerOptions extends HttpLogOptions {\n  log: Logger;\n}\n\nconst starts = new WeakMap<object, number>();\nconst finished = new WeakSet<object>();\n\nconst plugin: FastifyPluginCallback<FastifyLoggerOptions> = (app, opts, done) => {\n  const summary = (req: FastifyRequest, status: number) => {\n    if (finished.has(req)) return;\n    finished.add(req);\n    const store = storeOf(req);\n    const start = starts.get(req);\n    logHttpRequest(\n      opts.log,\n      {\n        method: req.method,\n        route: req.routeOptions?.url,\n        path: req.url,\n        status,\n        duration_ms: start === undefined ? undefined : performance.now() - start,\n        err: store?.error,\n        fields: store?.fields,\n      },\n      opts,\n    );\n  };\n\n  app.addHook(\"onRequest\", (req, reply, next) => {\n    const ctx = requestContextFields(req.headers);\n    reply.header(\"x-request-id\", ctx.request_id);\n    starts.set(req, performance.now());\n    runWithStore(ctx, (store) => {\n      attachStore(req, store);\n      attachStore(reply, store);\n      next();\n    });\n  });\n  app.addHook(\"onError\", (_req, reply, err, next) => {\n    const store = storeOf(reply);\n    if (store) recordErrorIn(store, err);\n    next();\n  });\n  app.addHook(\"onResponse\", (req, reply, next) => {\n    summary(req, reply.statusCode);\n    next();\n  });\n  // Client closed the connection before the response (Fastify >= 4.21).\n  app.addHook(\"onRequestAbort\", (req, next) => {\n    summary(req, 499);\n    next();\n  });\n  done();\n};\n\n// Same effect as fastify-plugin: hooks apply to the whole app, not an encapsulated child.\n(plugin as unknown as Record<symbol, boolean>)[Symbol.for(\"skip-override\")] = true;\n\nexport const fastifyLogger = plugin;\n","import { AsyncLocalStorage } from \"node:async_hooks\";\nimport { globalSingleton } from \"./global\";\nimport type { Fields } from \"./normalize\";\n\nexport interface ContextStore {\n  fields: Fields;\n  error?: unknown;\n  /** Route template captured while the router still knew it (Express error path). */\n  route?: string;\n  parent?: ContextStore;\n}\n\nconst als = globalSingleton(\"als\", () => new AsyncLocalStorage<ContextStore>());\n\nexport const STORE_KEY: symbol = Symbol.for(\"@tanngo11/log.store\");\n\nexport function runWithStore<T>(fields: Fields, fn: (store: ContextStore) => T): T {\n  const parent = als.getStore();\n  const store: ContextStore = { fields: { ...parent?.fields, ...fields }, parent };\n  return als.run(store, () => fn(store));\n}\n\nexport function withContext<T>(fields: Fields, fn: () => T): T {\n  return runWithStore(fields, () => fn());\n}\n\nexport function currentStore(): ContextStore | undefined {\n  return als.getStore();\n}\n\nexport function getContext(): Fields {\n  return als.getStore()?.fields ?? {};\n}\n\n// Applies to the current context and every enclosing one, so a field added inside a nested\n// withContext/runJob still reaches the request's http.request line.\nexport function addContext(fields: Fields): void {\n  for (let s = als.getStore(); s; s = s.parent) Object.assign(s.fields, fields);\n}\n\n// Sets the error on the store and on enclosing stores that have none yet.\nexport function recordErrorIn(store: ContextStore, err: unknown): void {\n  store.error = err;\n  for (let s = store.parent; s; s = s.parent) if (s.error === undefined) s.error = err;\n}\n\n// Marks the error that the current request/job summary line should carry. Does not write a line.\nexport function recordError(err: unknown): void {\n  const store = als.getStore();\n  if (store) recordErrorIn(store, err);\n}\n\nexport function attachStore(target: object, store: ContextStore): void {\n  (target as Record<symbol, ContextStore>)[STORE_KEY] = store;\n}\n\nexport function storeOf(target: unknown): ContextStore | undefined {\n  if (typeof target !== \"object\" || target === null) return undefined;\n  return (target as Record<symbol, ContextStore | undefined>)[STORE_KEY];\n}\n","// Singletons shared by every copy of this package loaded in the process (ESM and CJS builds,\n// or duplicated installs), so context and dedupe state never split.\nexport function globalSingleton<T>(name: string, make: () => T): T {\n  const key = Symbol.for(`@tanngo11/log.${name}`);\n  const g = globalThis as unknown as Record<symbol, T | undefined>;\n  let value = g[key];\n  if (value === undefined) {\n    value = make();\n    g[key] = value;\n  }\n  return value;\n}\n","// Redaction shared by the logger and the error serializer. The collector redacts again,\n// but it cannot see secrets inside JSON-encoded strings, so the app side must catch them.\n\nexport const DEFAULT_REDACT_KEYS = [\n  \"password\", \"passwd\", \"pwd\", \"passphrase\", \"secret\", \"client_secret\",\n  \"token\", \"access_token\", \"refresh_token\", \"id_token\", \"auth_token\",\n  \"api_key\", \"apikey\", \"access_key\", \"secret_key\", \"private_key\",\n  \"authorization\", \"cookie\", \"set_cookie\", \"session_id\", \"sessionid\",\n  \"credential\", \"credentials\", \"dsn\", \"connection_string\", \"conn_string\", \"jwt\", \"bearer\",\n];\n\n/** Opt-in value patterns for `redactValues`. Not on by default: they can hit ordinary numbers. */\nexport const REDACT_PATTERNS = {\n  /**\n   * Vietnamese mobile numbers: 0912345678, +84912345678, 84912345678. Letters on either side\n   * rule a match out, so hex ids (a UUID segment such as 0912345678e0) are left alone.\n   */\n  phoneVN: /(?<![\\dA-Za-z+])(?:\\+?84|0)[35789]\\d{8}(?![\\dA-Za-z])/g,\n  /** Visa, Mastercard, Amex, Discover-like card numbers, with optional spaces or dashes. */\n  paymentCard: /(?<!\\d)(?:4\\d{3}|5[1-5]\\d{2}|2[2-7]\\d{2}|3[47]\\d{2}|6(?:011|5\\d{2}))(?:[ -]?\\d{4}){2}[ -]?\\d{1,4}(?!\\d)/g,\n  /** IPv4 addresses. */\n  ipv4: /(?<![\\d.])(?:\\d{1,3}\\.){3}\\d{1,3}(?![\\d.])/g,\n} as const;\n\n// Keys that only describe a secret (count, type, timestamps, flags) stay readable.\nconst SAFE_SUFFIXES = [\"_count\", \"_type\", \"_length\", \"_expires_at\", \"_expires_in\", \"_ttl\", \"_at\", \"_ms\", \"_enabled\"];\n\nexport const REDACTED = \"[REDACTED]\";\n\nexport function toSnakeCase(key: string): string {\n  return key\n    .replace(/([a-z0-9])([A-Z])/g, \"$1_$2\")\n    .replace(/([A-Z]+)([A-Z][a-z])/g, \"$1_$2\")\n    .replace(/[^A-Za-z0-9_]+/g, \"_\")\n    .toLowerCase();\n}\n\nconst URL_CREDENTIALS_RE = /([a-z][a-z0-9+.-]*:\\/\\/)[^\\s/@:\"']+:[^\\s/@\"']+@/gi;\nconst BEARER_RE = /\\bBearer\\s+[A-Za-z0-9._~+/=-]+/gi;\nconst JWT_RE = /\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+/g;\nconst EMAIL_RE = /[A-Za-z0-9._%+-]+@([A-Za-z0-9-]+(?:\\.[A-Za-z0-9-]+)*\\.[A-Za-z]{2,})/g;\n\nexport type KeyPattern = string | RegExp;\n\nexport interface RedactorOptions {\n  /** Extra sensitive keys: names (matched like the defaults) or patterns tested on the snake_case key. */\n  keys?: readonly KeyPattern[];\n  /** Extra value patterns; every match inside any string becomes [REDACTED]. */\n  values?: readonly RegExp[];\n}\n\nexport interface Redactor {\n  isSensitive(key: string): boolean;\n  /** Masks secrets and emails that appear inside free text. */\n  scrub(s: string): string;\n  /** JSON.stringify that redacts sensitive keys at any depth and never throws. */\n  json(value: unknown): string;\n}\n\nfunction globalize(re: RegExp): RegExp {\n  return re.flags.includes(\"g\") ? new RegExp(re.source, re.flags) : new RegExp(re.source, `${re.flags}g`);\n}\n\nexport function createRedactor(opts: RedactorOptions = {}): Redactor {\n  const words = [...DEFAULT_REDACT_KEYS];\n  const keyPatterns: RegExp[] = [];\n  for (const k of opts.keys ?? []) {\n    if (typeof k === \"string\") words.push(toSnakeCase(k));\n    else keyPatterns.push(new RegExp(k.source, k.flags.replace(\"g\", \"\")));\n  }\n  const valuePatterns = (opts.values ?? []).map(globalize);\n\n  const isSensitive = (key: string): boolean => {\n    const k = toSnakeCase(key);\n    if (keyPatterns.some((re) => re.test(k))) return true;\n    if (!words.includes(k) && SAFE_SUFFIXES.some((s) => k.endsWith(s))) return false;\n    return words.some((w) => k === w || k.startsWith(`${w}_`) || k.endsWith(`_${w}`) || k.includes(`_${w}_`));\n  };\n\n  const scrub = (s: string): string => {\n    let out = s\n      .replace(URL_CREDENTIALS_RE, `$1${REDACTED}@`)\n      .replace(BEARER_RE, `Bearer ${REDACTED}`)\n      .replace(JWT_RE, \"[REDACTED_JWT]\")\n      .replace(EMAIL_RE, \"***@$1\");\n    for (const re of valuePatterns) out = out.replace(re, REDACTED);\n    return out;\n  };\n\n  const json = (value: unknown): string => {\n    if (typeof value === \"string\") return value;\n    try {\n      const text = JSON.stringify(value, (key, val: unknown) => {\n        if (key && val !== null && val !== undefined && isSensitive(key)) return REDACTED;\n        if (typeof val === \"bigint\") return val.toString();\n        if (val instanceof Error) return { name: val.name, message: val.message };\n        return val;\n      });\n      return text ?? String(value);\n    } catch {\n      return String(value);\n    }\n  };\n\n  return { isSensitive, scrub, json };\n}\n\nexport const defaultRedactor: Redactor = createRedactor();\n","import { globalSingleton } from \"./global\";\nimport { defaultRedactor } from \"./redact\";\n\nexport interface ErrFields {\n  err_type?: string;\n  err_message?: string;\n  err_code?: string;\n  err_stack?: string;\n  err_cause?: string;\n  /** Database errors (pg): the table and constraint the server reported. */\n  db_table?: string;\n  db_constraint?: string;\n}\n\nconst MAX_CAUSE_DEPTH = 5;\n\nexport function isErrorLike(v: unknown): v is Error {\n  if (v instanceof Error) return true;\n  return (\n    typeof v === \"object\" &&\n    v !== null &&\n    typeof (v as { message?: unknown }).message === \"string\" &&\n    (\"stack\" in v || \"name\" in v)\n  );\n}\n\nfunction errorType(e: Error): string {\n  // pg's DatabaseError keeps the lowercase name \"error\"; its class name says more.\n  if (e.name && e.name !== \"Error\" && e.name !== \"error\") return e.name;\n  const ctor = (e as { constructor?: { name?: string } }).constructor?.name;\n  return ctor && ctor !== \"Object\" ? ctor : \"Error\";\n}\n\nexport function serializeError(err: unknown): ErrFields {\n  if (!isErrorLike(err)) {\n    if (typeof err === \"string\") return { err_type: \"string\", err_message: err };\n    return { err_type: typeof err, err_message: defaultRedactor.json(err) };\n  }\n  const e = err as Error & { code?: unknown; cause?: unknown; table?: unknown; constraint?: unknown };\n  const out: ErrFields = { err_type: errorType(e), err_message: String(e.message ?? \"\") };\n  if (e.code !== undefined && e.code !== null) out.err_code = String(e.code);\n  if (isSqlState(out.err_code)) {\n    out.err_message = stripSql(out.err_message ?? \"\");\n    if (typeof e.table === \"string\" && e.table) out.db_table = e.table;\n    if (typeof e.constraint === \"string\" && e.constraint) out.db_constraint = e.constraint;\n  }\n  if (typeof e.stack === \"string\") out.err_stack = e.stack;\n\n  const causes: string[] = [];\n  let cause = e.cause;\n  while (cause !== undefined && cause !== null && causes.length < MAX_CAUSE_DEPTH) {\n    if (isErrorLike(cause)) {\n      causes.push(`${errorType(cause)}: ${cause.message}`);\n      cause = (cause as { cause?: unknown }).cause;\n    } else {\n      causes.push(defaultRedactor.json(cause));\n      cause = undefined;\n    }\n  }\n  if (causes.length > 0) out.err_cause = causes.join(\" <- \");\n  return out;\n}\n\n// Postgres SQLSTATE codes: five digits or uppercase letters (23505, 40P01, 25P02).\nfunction isSqlState(code: string | undefined): boolean {\n  return code !== undefined && /^[0-9A-Z]{5}$/.test(code);\n}\n\nconst SQL_START_RE = /^\\s*(?:select|insert|update|delete|with|create|alter|drop|truncate|lock)\\b/i;\n\n/**\n * knex prefixes a failed query's message with the whole statement (\"update ... - deadlock\n * detected\"). A long statement filled err_message and the truncation cut off the server's reason,\n * the only part worth reading. Keeps the reason; the statement never reaches the log.\n */\nexport function stripSql(message: string): string {\n  if (!SQL_START_RE.test(message)) return message;\n  const at = message.lastIndexOf(\" - \");\n  return at === -1 ? message : message.slice(at + 3);\n}\n\n// The client hung up or sent a malformed request: worth a warn, not an error on our side.\nexport function isClientDisconnect(err: unknown): boolean {\n  const e = err as { code?: unknown; message?: unknown } | null;\n  const code = typeof e?.code === \"string\" ? e.code : \"\";\n  return (\n    code === \"ECONNRESET\" ||\n    code === \"ECONNABORTED\" ||\n    code === \"EPIPE\" ||\n    code === \"ERR_STREAM_PREMATURE_CLOSE\" ||\n    code.startsWith(\"HPE_\") ||\n    e?.message === \"aborted\"\n  );\n}\n\nconst logged = globalSingleton(\"logged\", () => new WeakSet<object>());\n\n// Marks an error as already written, so a later boundary (e.g. Next's onRequestError)\n// does not log it a second time.\nexport function markLogged(err: unknown): void {\n  if (typeof err === \"object\" && err !== null) logged.add(err);\n}\n\nexport function isLogged(err: unknown): boolean {\n  return typeof err === \"object\" && err !== null && logged.has(err);\n}\n","import { isErrorLike, serializeError } from \"./error\";\nimport type { Level } from \"./levels\";\nimport { REDACTED, toSnakeCase, type Redactor } from \"./redact\";\n\nexport { DEFAULT_REDACT_KEYS, toSnakeCase } from \"./redact\";\n\n/** Final per-field hook: return a replacement, or undefined to drop the field. */\nexport type RedactHook = (key: string, value: Primitive) => unknown;\n\nexport type Fields = Record<string, unknown>;\nexport type Primitive = string | number | boolean | null;\nexport type LogRecord = Record<string, Primitive>;\n\nexport interface NormalizeOptions {\n  snakeCase: boolean;\n  redactor: Redactor;\n  hook?: RedactHook;\n}\n\n// Fields the redact hook never sees, so every line keeps its level, message and event.\nconst HOOK_EXEMPT = new Set([\"level\", \"message\", \"event\"]);\n\n// Keys owned by Vector (overwritten or deleted on ingest) or by the logger itself.\nexport const RESERVED_KEYS = new Set([\n  \"project\", \"service\", \"vps\", \"version\", \"container_name\", \"container_id\", \"image\", \"stream\",\n  \"_timestamp\", \"label\", \"host\", \"source_type\", \"msg\", \"lvl\", \"severity\", \"level\", \"message\",\n]);\n\nexport const MAX_LINE_BYTES = 16000;\nconst MAX_MESSAGE = 500;\nconst MAX_STACK = 4000;\nconst MAX_STRING = 1000;\nconst MAX_DEPTH = 3;\nconst TRUNCATED = \"…[truncated]\";\n\n// Fields kept when a line is too large.\nconst KEEP_ON_SHRINK = new Set([\n  \"level\", \"message\", \"event\", \"request_id\", \"trace_id\", \"span_id\", \"job_name\", \"job_id\", \"job_attempt\",\n  \"user_id\", \"tenant_id\", \"err_type\", \"err_message\", \"err_code\",\n]);\n\nexport function stripUrl(url: string): string {\n  const noQuery = url.split(/[?#]/, 1)[0] ?? \"\";\n  return noQuery.replace(/^([a-z][a-z0-9+.-]*:\\/\\/)[^/@\\s]*@/i, \"$1\");\n}\n\nexport function truncate(s: string, max: number): string {\n  return s.length > max ? s.slice(0, max - TRUNCATED.length) + TRUNCATED : s;\n}\n\nfunction isPlainObject(v: unknown): v is Fields {\n  if (typeof v !== \"object\" || v === null) return false;\n  const proto = Object.getPrototypeOf(v);\n  return proto === Object.prototype || proto === null;\n}\n\nfunction isUrlKey(key: string): boolean {\n  return key === \"http_path\" || key === \"http_url\" || key.endsWith(\"_url\");\n}\n\nfunction flattenInto(out: LogRecord, prefix: string, obj: Fields, depth: number, opts: NormalizeOptions): void {\n  for (const [rawKey, value] of Object.entries(obj)) {\n    const key = opts.snakeCase ? toSnakeCase(rawKey) : rawKey;\n    const full = prefix ? `${prefix}_${key}` : key;\n    if (value === undefined || typeof value === \"function\" || typeof value === \"symbol\") continue;\n    if (value !== null && (opts.redactor.isSensitive(rawKey) || opts.redactor.isSensitive(full))) {\n      out[full] = REDACTED;\n      continue;\n    }\n    if (value === null || typeof value === \"string\" || typeof value === \"boolean\") {\n      out[full] = value;\n    } else if (typeof value === \"number\") {\n      out[full] = Number.isFinite(value) ? value : String(value);\n    } else if (typeof value === \"bigint\") {\n      out[full] = value.toString();\n    } else if (value instanceof Date) {\n      out[full] = Number.isNaN(value.getTime()) ? \"Invalid Date\" : value.toISOString();\n    } else if (isErrorLike(value)) {\n      out[full] = `${value.name}: ${value.message}`;\n    } else if (isPlainObject(value) && depth < MAX_DEPTH - 1) {\n      flattenInto(out, full, value, depth + 1, opts);\n    } else {\n      // Arrays, deep objects, class instances: stringified with sensitive keys redacted.\n      out[full] = opts.redactor.json(value);\n    }\n  }\n}\n\n// Correlation ids are opaque tokens: value patterns such as phoneVN can match inside a hex\n// segment and break the join between services, so a well-formed id is never scrubbed.\nconst ID_VALUE_RE = /^[A-Za-z0-9._:-]{1,128}$/;\n\nfunction isIdKey(key: string): boolean {\n  return key === \"request_id\" || key === \"trace_id\" || key === \"span_id\" || key.endsWith(\"_request_id\");\n}\n\nfunction finalize(key: string, value: Primitive, opts: NormalizeOptions): Primitive {\n  if (typeof value !== \"string\") return value;\n  if (isIdKey(key) && ID_VALUE_RE.test(value)) return value;\n  const v = opts.redactor.scrub(isUrlKey(key) ? stripUrl(value) : value);\n  return truncate(v, key === \"err_stack\" ? MAX_STACK : MAX_STRING);\n}\n\nexport function buildRecord(\n  level: Level,\n  message: unknown,\n  sources: (Fields | undefined)[],\n  opts: NormalizeOptions,\n): LogRecord {\n  const merged: Fields = {};\n  for (const source of sources) if (source) Object.assign(merged, source);\n\n  let err: unknown;\n  if (merged.err !== undefined && merged.err !== null) {\n    err = merged.err;\n    delete merged.err;\n  } else if (isErrorLike(merged.error)) {\n    err = merged.error;\n    delete merged.error;\n  }\n\n  const flat: LogRecord = {};\n  flattenInto(flat, \"\", merged, 0, opts);\n  if (err !== undefined) Object.assign(flat, serializeError(err));\n\n  const text = typeof message === \"string\" ? message : opts.redactor.json(message);\n  const out: LogRecord = { level, message: truncate(opts.redactor.scrub(text), MAX_MESSAGE) };\n  for (const [k, v] of Object.entries(flat)) {\n    const key = RESERVED_KEYS.has(k) ? `app_${k}` : k;\n    let value = finalize(key, v, opts);\n    if (opts.hook && !HOOK_EXEMPT.has(key)) {\n      const replaced = opts.hook(key, value);\n      if (replaced === undefined) continue;\n      value = typeof replaced === \"object\" && replaced !== null ? opts.redactor.json(replaced) : (replaced as Primitive);\n    }\n    out[key] = value;\n  }\n  return out;\n}\n\nfunction byteLength(s: string): number {\n  // UTF-8 uses at most 3 bytes per UTF-16 code unit: skip encoding short lines.\n  if (s.length * 3 <= MAX_LINE_BYTES) return s.length;\n  return new TextEncoder().encode(s).length;\n}\n\nexport function serializeRecord(record: LogRecord): string {\n  const line = JSON.stringify(record);\n  if (byteLength(line) <= MAX_LINE_BYTES) return line;\n  const small: LogRecord = {};\n  for (const [k, v] of Object.entries(record)) {\n    if (KEEP_ON_SHRINK.has(k) || k.startsWith(\"http_\")) small[k] = v;\n  }\n  small.log_truncated = true;\n  return JSON.stringify(small);\n}\n","// No imports: this module is shared with the edge entry (next-edge).\nexport const REQUEST_ID_RE = /^[A-Za-z0-9._-]{1,64}$/;\nconst TRACEPARENT_RE = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/;\n\nexport function newRequestId(): string {\n  return globalThis.crypto.randomUUID();\n}\n\nfunction first(header?: string | string[] | null): string | undefined {\n  return Array.isArray(header) ? header[0] : (header ?? undefined);\n}\n\nexport function resolveRequestId(header?: string | string[] | null): string {\n  const value = first(header);\n  return value && REQUEST_ID_RE.test(value) ? value : newRequestId();\n}\n\nexport function parseTraceparent(header?: string | string[] | null): { trace_id: string; span_id: string } | undefined {\n  const value = first(header)?.trim().toLowerCase();\n  const m = value ? TRACEPARENT_RE.exec(value) : null;\n  if (!m) return undefined;\n  const [, version, traceId, spanId] = m as unknown as [string, string, string, string];\n  if (version === \"ff\" || /^0+$/.test(traceId) || /^0+$/.test(spanId)) return undefined;\n  return { trace_id: traceId, span_id: spanId };\n}\n","import { getContext } from \"./context\";\nimport { isClientDisconnect, markLogged, serializeError } from \"./error\";\nimport type { Logger } from \"./logger\";\nimport { stripUrl, type Fields } from \"./normalize\";\nimport { parseTraceparent, resolveRequestId } from \"./request-id\";\n\nexport { newRequestId, parseTraceparent, REQUEST_ID_RE, resolveRequestId } from \"./request-id\";\n\nexport type HeaderSource = Headers | Record<string, string | string[] | undefined>;\n\nfunction header(headers: HeaderSource, name: string): string | string[] | undefined {\n  if (typeof (headers as Headers).get === \"function\") return (headers as Headers).get(name) ?? undefined;\n  return (headers as Record<string, string | string[] | undefined>)[name];\n}\n\nexport function requestContextFields(headers: HeaderSource): { request_id: string; trace_id?: string; span_id?: string } {\n  const out: { request_id: string; trace_id?: string; span_id?: string } = {\n    request_id: resolveRequestId(header(headers, \"x-request-id\")),\n  };\n  const tp = parseTraceparent(header(headers, \"traceparent\"));\n  if (tp) Object.assign(out, tp);\n  return out;\n}\n\n// Headers to forward to services we own, so their logs share request_id / trace_id.\nexport function propagationHeaders(): Record<string, string> {\n  const ctx = getContext();\n  const out: Record<string, string> = {};\n  if (typeof ctx.request_id === \"string\") out[\"x-request-id\"] = ctx.request_id;\n  if (typeof ctx.trace_id === \"string\" && typeof ctx.span_id === \"string\") {\n    out.traceparent = `00-${ctx.trace_id}-${ctx.span_id}-01`;\n  }\n  return out;\n}\n\nexport const DEFAULT_SKIP_PATHS: (string | RegExp)[] = [\n  // Also under a prefix such as /api/v1/health.\n  /(^|\\/)(health|healthz|ready|readyz|livez)\\/?$/,\n  \"/favicon.ico\",\n  /^\\/_next\\/static\\//,\n];\n\nexport interface HttpLogOptions {\n  skipPaths?: (string | RegExp)[];\n}\n\nexport interface HttpRequestInfo {\n  method: string;\n  route?: string;\n  path: string;\n  status: number;\n  duration_ms?: number;\n  err?: unknown;\n  fields?: Fields;\n}\n\nexport function shouldSkip(method: string, path: string, skipPaths: (string | RegExp)[] = DEFAULT_SKIP_PATHS): boolean {\n  if (method.toUpperCase() === \"OPTIONS\") return true;\n  const p = stripUrl(path);\n  return skipPaths.some((s) => (typeof s === \"string\" ? p === s : s.test(p)));\n}\n\n// Writes the one `http.request` summary line for an inbound request. Skipped paths are still\n// logged when they fail with a 5xx, so a failing health check stays visible.\nexport function logHttpRequest(log: Logger, info: HttpRequestInfo, opts: HttpLogOptions = {}): void {\n  if (info.status < 500 && shouldSkip(info.method, info.path, opts.skipPaths)) return;\n  const hasErr = info.err !== undefined && info.err !== null;\n  // A client that hung up mid-request is not a server failure, whatever status the app set.\n  const clientGone = hasErr && isClientDisconnect(info.err);\n  const level = info.status >= 500 && !clientGone ? \"error\" : info.status >= 400 ? \"warn\" : \"info\";\n  const path = stripUrl(info.path);\n  const errFields: Fields = {};\n  if (hasErr) {\n    Object.assign(errFields, serializeError(info.err));\n    if (info.status < 500 || clientGone) delete errFields.err_stack;\n    if (clientGone) errFields.client_disconnect = true;\n    markLogged(info.err);\n  }\n  // Route templates keep the message bounded; the raw path would make one message per URL.\n  const message = info.route ? `${info.method} ${info.route} ${info.status}` : `${info.method} ${info.status}`;\n  log[level](message, {\n    ...info.fields,\n    event: \"http.request\",\n    http_method: info.method,\n    http_route: info.route,\n    http_path: path,\n    http_status: info.status,\n    duration_ms: info.duration_ms === undefined ? undefined : Math.round(info.duration_ms),\n    ...errFields,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,8BAAkC;;;ACE3B,SAAS,gBAAmB,MAAc,MAAkB;AACjE,QAAM,MAAM,uBAAO,IAAI,iBAAiB,IAAI,EAAE;AAC9C,QAAM,IAAI;AACV,MAAI,QAAQ,EAAE,GAAG;AACjB,MAAI,UAAU,QAAW;AACvB,YAAQ,KAAK;AACb,MAAE,GAAG,IAAI;AAAA,EACX;AACA,SAAO;AACT;;;ADCA,IAAM,MAAM,gBAAgB,OAAO,MAAM,IAAI,0CAAgC,CAAC;AAEvE,IAAM,YAAoB,uBAAO,IAAI,qBAAqB;AAE1D,SAAS,aAAgB,QAAgB,IAAmC;AACjF,QAAM,SAAS,IAAI,SAAS;AAC5B,QAAM,QAAsB,EAAE,QAAQ,EAAE,GAAG,QAAQ,QAAQ,GAAG,OAAO,GAAG,OAAO;AAC/E,SAAO,IAAI,IAAI,OAAO,MAAM,GAAG,KAAK,CAAC;AACvC;AAqBO,SAAS,cAAc,OAAqB,KAAoB;AACrE,QAAM,QAAQ;AACd,WAAS,IAAI,MAAM,QAAQ,GAAG,IAAI,EAAE,OAAQ,KAAI,EAAE,UAAU,OAAW,GAAE,QAAQ;AACnF;AAQO,SAAS,YAAY,QAAgB,OAA2B;AACrE,EAAC,OAAwC,SAAS,IAAI;AACxD;AAEO,SAAS,QAAQ,QAA2C;AACjE,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,SAAQ,OAAoD,SAAS;AACvE;;;AExDO,IAAM,sBAAsB;AAAA,EACjC;AAAA,EAAY;AAAA,EAAU;AAAA,EAAO;AAAA,EAAc;AAAA,EAAU;AAAA,EACrD;AAAA,EAAS;AAAA,EAAgB;AAAA,EAAiB;AAAA,EAAY;AAAA,EACtD;AAAA,EAAW;AAAA,EAAU;AAAA,EAAc;AAAA,EAAc;AAAA,EACjD;AAAA,EAAiB;AAAA,EAAU;AAAA,EAAc;AAAA,EAAc;AAAA,EACvD;AAAA,EAAc;AAAA,EAAe;AAAA,EAAO;AAAA,EAAqB;AAAA,EAAe;AAAA,EAAO;AACjF;AAgBA,IAAM,gBAAgB,CAAC,UAAU,SAAS,WAAW,eAAe,eAAe,QAAQ,OAAO,OAAO,UAAU;AAE5G,IAAM,WAAW;AAEjB,SAAS,YAAY,KAAqB;AAC/C,SAAO,IACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,yBAAyB,OAAO,EACxC,QAAQ,mBAAmB,GAAG,EAC9B,YAAY;AACjB;AAEA,IAAM,qBAAqB;AAC3B,IAAM,YAAY;AAClB,IAAM,SAAS;AACf,IAAM,WAAW;AAmBjB,SAAS,UAAU,IAAoB;AACrC,SAAO,GAAG,MAAM,SAAS,GAAG,IAAI,IAAI,OAAO,GAAG,QAAQ,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,QAAQ,GAAG,GAAG,KAAK,GAAG;AACxG;AAEO,SAAS,eAAe,OAAwB,CAAC,GAAa;AACnE,QAAM,QAAQ,CAAC,GAAG,mBAAmB;AACrC,QAAM,cAAwB,CAAC;AAC/B,aAAW,KAAK,KAAK,QAAQ,CAAC,GAAG;AAC/B,QAAI,OAAO,MAAM,SAAU,OAAM,KAAK,YAAY,CAAC,CAAC;AAAA,QAC/C,aAAY,KAAK,IAAI,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,KAAK,EAAE,CAAC,CAAC;AAAA,EACtE;AACA,QAAM,iBAAiB,KAAK,UAAU,CAAC,GAAG,IAAI,SAAS;AAEvD,QAAM,cAAc,CAAC,QAAyB;AAC5C,UAAM,IAAI,YAAY,GAAG;AACzB,QAAI,YAAY,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,EAAG,QAAO;AACjD,QAAI,CAAC,MAAM,SAAS,CAAC,KAAK,cAAc,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAG,QAAO;AAC3E,WAAO,MAAM,KAAK,CAAC,MAAM,MAAM,KAAK,EAAE,WAAW,GAAG,CAAC,GAAG,KAAK,EAAE,SAAS,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,GAAG,CAAC;AAAA,EAC1G;AAEA,QAAM,QAAQ,CAAC,MAAsB;AACnC,QAAI,MAAM,EACP,QAAQ,oBAAoB,KAAK,QAAQ,GAAG,EAC5C,QAAQ,WAAW,UAAU,QAAQ,EAAE,EACvC,QAAQ,QAAQ,gBAAgB,EAChC,QAAQ,UAAU,QAAQ;AAC7B,eAAW,MAAM,cAAe,OAAM,IAAI,QAAQ,IAAI,QAAQ;AAC9D,WAAO;AAAA,EACT;AAEA,QAAM,OAAO,CAAC,UAA2B;AACvC,QAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAI;AACF,YAAM,OAAO,KAAK,UAAU,OAAO,CAAC,KAAK,QAAiB;AACxD,YAAI,OAAO,QAAQ,QAAQ,QAAQ,UAAa,YAAY,GAAG,EAAG,QAAO;AACzE,YAAI,OAAO,QAAQ,SAAU,QAAO,IAAI,SAAS;AACjD,YAAI,eAAe,MAAO,QAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ;AACxE,eAAO;AAAA,MACT,CAAC;AACD,aAAO,QAAQ,OAAO,KAAK;AAAA,IAC7B,QAAQ;AACN,aAAO,OAAO,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,SAAO,EAAE,aAAa,OAAO,KAAK;AACpC;AAEO,IAAM,kBAA4B,eAAe;;;AC7FxD,IAAM,kBAAkB;AAEjB,SAAS,YAAY,GAAwB;AAClD,MAAI,aAAa,MAAO,QAAO;AAC/B,SACE,OAAO,MAAM,YACb,MAAM,QACN,OAAQ,EAA4B,YAAY,aAC/C,WAAW,KAAK,UAAU;AAE/B;AAEA,SAAS,UAAU,GAAkB;AAEnC,MAAI,EAAE,QAAQ,EAAE,SAAS,WAAW,EAAE,SAAS,QAAS,QAAO,EAAE;AACjE,QAAM,OAAQ,EAA0C,aAAa;AACrE,SAAO,QAAQ,SAAS,WAAW,OAAO;AAC5C;AAEO,SAAS,eAAe,KAAyB;AACtD,MAAI,CAAC,YAAY,GAAG,GAAG;AACrB,QAAI,OAAO,QAAQ,SAAU,QAAO,EAAE,UAAU,UAAU,aAAa,IAAI;AAC3E,WAAO,EAAE,UAAU,OAAO,KAAK,aAAa,gBAAgB,KAAK,GAAG,EAAE;AAAA,EACxE;AACA,QAAM,IAAI;AACV,QAAM,MAAiB,EAAE,UAAU,UAAU,CAAC,GAAG,aAAa,OAAO,EAAE,WAAW,EAAE,EAAE;AACtF,MAAI,EAAE,SAAS,UAAa,EAAE,SAAS,KAAM,KAAI,WAAW,OAAO,EAAE,IAAI;AACzE,MAAI,WAAW,IAAI,QAAQ,GAAG;AAC5B,QAAI,cAAc,SAAS,IAAI,eAAe,EAAE;AAChD,QAAI,OAAO,EAAE,UAAU,YAAY,EAAE,MAAO,KAAI,WAAW,EAAE;AAC7D,QAAI,OAAO,EAAE,eAAe,YAAY,EAAE,WAAY,KAAI,gBAAgB,EAAE;AAAA,EAC9E;AACA,MAAI,OAAO,EAAE,UAAU,SAAU,KAAI,YAAY,EAAE;AAEnD,QAAM,SAAmB,CAAC;AAC1B,MAAI,QAAQ,EAAE;AACd,SAAO,UAAU,UAAa,UAAU,QAAQ,OAAO,SAAS,iBAAiB;AAC/E,QAAI,YAAY,KAAK,GAAG;AACtB,aAAO,KAAK,GAAG,UAAU,KAAK,CAAC,KAAK,MAAM,OAAO,EAAE;AACnD,cAAS,MAA8B;AAAA,IACzC,OAAO;AACL,aAAO,KAAK,gBAAgB,KAAK,KAAK,CAAC;AACvC,cAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,OAAO,SAAS,EAAG,KAAI,YAAY,OAAO,KAAK,MAAM;AACzD,SAAO;AACT;AAGA,SAAS,WAAW,MAAmC;AACrD,SAAO,SAAS,UAAa,gBAAgB,KAAK,IAAI;AACxD;AAEA,IAAM,eAAe;AAOd,SAAS,SAAS,SAAyB;AAChD,MAAI,CAAC,aAAa,KAAK,OAAO,EAAG,QAAO;AACxC,QAAM,KAAK,QAAQ,YAAY,KAAK;AACpC,SAAO,OAAO,KAAK,UAAU,QAAQ,MAAM,KAAK,CAAC;AACnD;AAGO,SAAS,mBAAmB,KAAuB;AACxD,QAAM,IAAI;AACV,QAAM,OAAO,OAAO,GAAG,SAAS,WAAW,EAAE,OAAO;AACpD,SACE,SAAS,gBACT,SAAS,kBACT,SAAS,WACT,SAAS,gCACT,KAAK,WAAW,MAAM,KACtB,GAAG,YAAY;AAEnB;AAEA,IAAM,SAAS,gBAAgB,UAAU,MAAM,oBAAI,QAAgB,CAAC;AAI7D,SAAS,WAAW,KAAoB;AAC7C,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO,IAAI,GAAG;AAC7D;;;AC5DO,SAAS,SAAS,KAAqB;AAC5C,QAAM,UAAU,IAAI,MAAM,QAAQ,CAAC,EAAE,CAAC,KAAK;AAC3C,SAAO,QAAQ,QAAQ,uCAAuC,IAAI;AACpE;;;AC3CO,IAAM,gBAAgB;AAC7B,IAAM,iBAAiB;AAEhB,SAAS,eAAuB;AACrC,SAAO,WAAW,OAAO,WAAW;AACtC;AAEA,SAAS,MAAMA,SAAuD;AACpE,SAAO,MAAM,QAAQA,OAAM,IAAIA,QAAO,CAAC,IAAKA,WAAU;AACxD;AAEO,SAAS,iBAAiBA,SAA2C;AAC1E,QAAM,QAAQ,MAAMA,OAAM;AAC1B,SAAO,SAAS,cAAc,KAAK,KAAK,IAAI,QAAQ,aAAa;AACnE;AAEO,SAAS,iBAAiBA,SAAsF;AACrH,QAAM,QAAQ,MAAMA,OAAM,GAAG,KAAK,EAAE,YAAY;AAChD,QAAM,IAAI,QAAQ,eAAe,KAAK,KAAK,IAAI;AAC/C,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,CAAC,EAAE,SAAS,SAAS,MAAM,IAAI;AACrC,MAAI,YAAY,QAAQ,OAAO,KAAK,OAAO,KAAK,OAAO,KAAK,MAAM,EAAG,QAAO;AAC5E,SAAO,EAAE,UAAU,SAAS,SAAS,OAAO;AAC9C;;;ACdA,SAAS,OAAO,SAAuB,MAA6C;AAClF,MAAI,OAAQ,QAAoB,QAAQ,WAAY,QAAQ,QAAoB,IAAI,IAAI,KAAK;AAC7F,SAAQ,QAA0D,IAAI;AACxE;AAEO,SAAS,qBAAqB,SAAoF;AACvH,QAAM,MAAmE;AAAA,IACvE,YAAY,iBAAiB,OAAO,SAAS,cAAc,CAAC;AAAA,EAC9D;AACA,QAAM,KAAK,iBAAiB,OAAO,SAAS,aAAa,CAAC;AAC1D,MAAI,GAAI,QAAO,OAAO,KAAK,EAAE;AAC7B,SAAO;AACT;AAaO,IAAM,qBAA0C;AAAA;AAAA,EAErD;AAAA,EACA;AAAA,EACA;AACF;AAgBO,SAAS,WAAW,QAAgB,MAAc,YAAiC,oBAA6B;AACrH,MAAI,OAAO,YAAY,MAAM,UAAW,QAAO;AAC/C,QAAM,IAAI,SAAS,IAAI;AACvB,SAAO,UAAU,KAAK,CAAC,MAAO,OAAO,MAAM,WAAW,MAAM,IAAI,EAAE,KAAK,CAAC,CAAE;AAC5E;AAIO,SAAS,eAAe,KAAa,MAAuB,OAAuB,CAAC,GAAS;AAClG,MAAI,KAAK,SAAS,OAAO,WAAW,KAAK,QAAQ,KAAK,MAAM,KAAK,SAAS,EAAG;AAC7E,QAAM,SAAS,KAAK,QAAQ,UAAa,KAAK,QAAQ;AAEtD,QAAM,aAAa,UAAU,mBAAmB,KAAK,GAAG;AACxD,QAAM,QAAQ,KAAK,UAAU,OAAO,CAAC,aAAa,UAAU,KAAK,UAAU,MAAM,SAAS;AAC1F,QAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,QAAM,YAAoB,CAAC;AAC3B,MAAI,QAAQ;AACV,WAAO,OAAO,WAAW,eAAe,KAAK,GAAG,CAAC;AACjD,QAAI,KAAK,SAAS,OAAO,WAAY,QAAO,UAAU;AACtD,QAAI,WAAY,WAAU,oBAAoB;AAC9C,eAAW,KAAK,GAAG;AAAA,EACrB;AAEA,QAAM,UAAU,KAAK,QAAQ,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,KAAK,MAAM,IAAI,KAAK,MAAM;AAC1G,MAAI,KAAK,EAAE,SAAS;AAAA,IAClB,GAAG,KAAK;AAAA,IACR,OAAO;AAAA,IACP,aAAa,KAAK;AAAA,IAClB,YAAY,KAAK;AAAA,IACjB,WAAW;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK,gBAAgB,SAAY,SAAY,KAAK,MAAM,KAAK,WAAW;AAAA,IACrF,GAAG;AAAA,EACL,CAAC;AACH;;;APjFA,IAAM,SAAS,oBAAI,QAAwB;AAC3C,IAAM,WAAW,oBAAI,QAAgB;AAErC,IAAM,SAAsD,CAAC,KAAK,MAAM,SAAS;AAC/E,QAAM,UAAU,CAAC,KAAqB,WAAmB;AACvD,QAAI,SAAS,IAAI,GAAG,EAAG;AACvB,aAAS,IAAI,GAAG;AAChB,UAAM,QAAQ,QAAQ,GAAG;AACzB,UAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B;AAAA,MACE,KAAK;AAAA,MACL;AAAA,QACE,QAAQ,IAAI;AAAA,QACZ,OAAO,IAAI,cAAc;AAAA,QACzB,MAAM,IAAI;AAAA,QACV;AAAA,QACA,aAAa,UAAU,SAAY,SAAY,YAAY,IAAI,IAAI;AAAA,QACnE,KAAK,OAAO;AAAA,QACZ,QAAQ,OAAO;AAAA,MACjB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,aAAa,CAAC,KAAK,OAAO,SAAS;AAC7C,UAAM,MAAM,qBAAqB,IAAI,OAAO;AAC5C,UAAM,OAAO,gBAAgB,IAAI,UAAU;AAC3C,WAAO,IAAI,KAAK,YAAY,IAAI,CAAC;AACjC,iBAAa,KAAK,CAAC,UAAU;AAC3B,kBAAY,KAAK,KAAK;AACtB,kBAAY,OAAO,KAAK;AACxB,WAAK;AAAA,IACP,CAAC;AAAA,EACH,CAAC;AACD,MAAI,QAAQ,WAAW,CAAC,MAAM,OAAO,KAAK,SAAS;AACjD,UAAM,QAAQ,QAAQ,KAAK;AAC3B,QAAI,MAAO,eAAc,OAAO,GAAG;AACnC,SAAK;AAAA,EACP,CAAC;AACD,MAAI,QAAQ,cAAc,CAAC,KAAK,OAAO,SAAS;AAC9C,YAAQ,KAAK,MAAM,UAAU;AAC7B,SAAK;AAAA,EACP,CAAC;AAED,MAAI,QAAQ,kBAAkB,CAAC,KAAK,SAAS;AAC3C,YAAQ,KAAK,GAAG;AAChB,SAAK;AAAA,EACP,CAAC;AACD,OAAK;AACP;AAGC,OAA8C,uBAAO,IAAI,eAAe,CAAC,IAAI;AAEvE,IAAM,gBAAgB;","names":["header"]}
+{"version":3,"sources":["../src/fastify.ts","../src/context.ts","../src/global.ts","../src/redact.ts","../src/error.ts","../src/normalize.ts","../src/request-id.ts","../src/http.ts"],"sourcesContent":["import type { FastifyPluginCallback, FastifyRequest } from \"fastify\";\nimport { attachStore, recordErrorIn, runWithStore, storeOf } from \"./context\";\nimport { logHttpRequest, requestContextFields, type HttpLogOptions } from \"./http\";\nimport type { Logger } from \"./logger\";\n\nexport interface FastifyLoggerOptions extends HttpLogOptions {\n  log: Logger;\n}\n\nconst starts = new WeakMap<object, number>();\nconst finished = new WeakSet<object>();\n\nconst plugin: FastifyPluginCallback<FastifyLoggerOptions> = (app, opts, done) => {\n  const summary = (req: FastifyRequest, status: number) => {\n    if (finished.has(req)) return;\n    finished.add(req);\n    const store = storeOf(req);\n    const start = starts.get(req);\n    logHttpRequest(\n      opts.log,\n      {\n        method: req.method,\n        route: req.routeOptions?.url,\n        path: req.url,\n        status,\n        duration_ms: start === undefined ? undefined : performance.now() - start,\n        err: store?.error,\n        fields: store?.fields,\n      },\n      opts,\n    );\n  };\n\n  app.addHook(\"onRequest\", (req, reply, next) => {\n    const ctx = requestContextFields(req.headers);\n    reply.header(\"x-request-id\", ctx.request_id);\n    starts.set(req, performance.now());\n    runWithStore(ctx, (store) => {\n      attachStore(req, store);\n      attachStore(reply, store);\n      next();\n    });\n  });\n  app.addHook(\"onError\", (_req, reply, err, next) => {\n    const store = storeOf(reply);\n    if (store) recordErrorIn(store, err);\n    next();\n  });\n  app.addHook(\"onResponse\", (req, reply, next) => {\n    summary(req, reply.statusCode);\n    next();\n  });\n  // Client closed the connection before the response (Fastify >= 4.21).\n  app.addHook(\"onRequestAbort\", (req, next) => {\n    summary(req, 499);\n    next();\n  });\n  done();\n};\n\n// Same effect as fastify-plugin: hooks apply to the whole app, not an encapsulated child.\n(plugin as unknown as Record<symbol, boolean>)[Symbol.for(\"skip-override\")] = true;\n\nexport const fastifyLogger = plugin;\n","import { AsyncLocalStorage } from \"node:async_hooks\";\nimport { globalSingleton } from \"./global\";\nimport type { Fields } from \"./normalize\";\n\nexport interface ContextStore {\n  fields: Fields;\n  error?: unknown;\n  /** Route template captured while the router still knew it (Express error path). */\n  route?: string;\n  parent?: ContextStore;\n}\n\nconst als = globalSingleton(\"als\", () => new AsyncLocalStorage<ContextStore>());\n\nexport const STORE_KEY: symbol = Symbol.for(\"@tanngo11/log.store\");\n\nexport function runWithStore<T>(fields: Fields, fn: (store: ContextStore) => T): T {\n  const parent = als.getStore();\n  const store: ContextStore = { fields: { ...parent?.fields, ...fields }, parent };\n  return als.run(store, () => fn(store));\n}\n\nexport function withContext<T>(fields: Fields, fn: () => T): T {\n  return runWithStore(fields, () => fn());\n}\n\nexport function currentStore(): ContextStore | undefined {\n  return als.getStore();\n}\n\nexport function getContext(): Fields {\n  return als.getStore()?.fields ?? {};\n}\n\n// Applies to the current context and every enclosing one, so a field added inside a nested\n// withContext/runJob still reaches the request's http.request line.\nexport function addContext(fields: Fields): void {\n  for (let s = als.getStore(); s; s = s.parent) Object.assign(s.fields, fields);\n}\n\n// Sets the error on the store and on enclosing stores that have none yet.\nexport function recordErrorIn(store: ContextStore, err: unknown): void {\n  store.error = err;\n  for (let s = store.parent; s; s = s.parent) if (s.error === undefined) s.error = err;\n}\n\n// Marks the error that the current request/job summary line should carry. Does not write a line.\nexport function recordError(err: unknown): void {\n  const store = als.getStore();\n  if (store) recordErrorIn(store, err);\n}\n\nexport function attachStore(target: object, store: ContextStore): void {\n  (target as Record<symbol, ContextStore>)[STORE_KEY] = store;\n}\n\nexport function storeOf(target: unknown): ContextStore | undefined {\n  if (typeof target !== \"object\" || target === null) return undefined;\n  return (target as Record<symbol, ContextStore | undefined>)[STORE_KEY];\n}\n","// Singletons shared by every copy of this package loaded in the process (ESM and CJS builds,\n// or duplicated installs), so context and dedupe state never split.\nexport function globalSingleton<T>(name: string, make: () => T): T {\n  const key = Symbol.for(`@tanngo11/log.${name}`);\n  const g = globalThis as unknown as Record<symbol, T | undefined>;\n  let value = g[key];\n  if (value === undefined) {\n    value = make();\n    g[key] = value;\n  }\n  return value;\n}\n","// Redaction shared by the logger and the error serializer. The collector redacts again,\n// but it cannot see secrets inside JSON-encoded strings, so the app side must catch them.\n\nexport const DEFAULT_REDACT_KEYS = [\n  \"password\", \"passwd\", \"pwd\", \"passphrase\", \"secret\", \"client_secret\",\n  \"token\", \"access_token\", \"refresh_token\", \"id_token\", \"auth_token\",\n  \"api_key\", \"apikey\", \"access_key\", \"secret_key\", \"private_key\",\n  \"authorization\", \"cookie\", \"set_cookie\", \"session_id\", \"sessionid\",\n  \"credential\", \"credentials\", \"dsn\", \"connection_string\", \"conn_string\", \"jwt\", \"bearer\",\n];\n\n/** Opt-in value patterns for `redactValues`. Not on by default: they can hit ordinary numbers. */\nexport const REDACT_PATTERNS = {\n  /**\n   * Vietnamese mobile numbers: 0912345678, +84912345678, 84912345678, also \"SDT0912345678\". A\n   * hex letter (a-f) on either side rules a match out, so hex ids (a UUID segment such as\n   * 0912345678e0) are left alone.\n   */\n  phoneVN: /(?<![\\dA-Fa-f+])(?:\\+?84|0)[35789]\\d{8}(?![\\dA-Fa-f])/g,\n  /** Visa, Mastercard, Amex, Discover-like card numbers, with optional spaces or dashes. */\n  paymentCard: /(?<!\\d)(?:4\\d{3}|5[1-5]\\d{2}|2[2-7]\\d{2}|3[47]\\d{2}|6(?:011|5\\d{2}))(?:[ -]?\\d{4}){2}[ -]?\\d{1,4}(?!\\d)/g,\n  /** IPv4 addresses. */\n  ipv4: /(?<![\\d.])(?:\\d{1,3}\\.){3}\\d{1,3}(?![\\d.])/g,\n} as const;\n\n// Keys that only describe a secret (count, type, timestamps, flags) stay readable.\nconst SAFE_SUFFIXES = [\"_count\", \"_type\", \"_length\", \"_expires_at\", \"_expires_in\", \"_ttl\", \"_at\", \"_ms\", \"_enabled\"];\n\nexport const REDACTED = \"[REDACTED]\";\n\nexport function toSnakeCase(key: string): string {\n  return key\n    .replace(/([a-z0-9])([A-Z])/g, \"$1_$2\")\n    .replace(/([A-Z]+)([A-Z][a-z])/g, \"$1_$2\")\n    .replace(/[^A-Za-z0-9_]+/g, \"_\")\n    .toLowerCase();\n}\n\nconst URL_CREDENTIALS_RE = /([a-z][a-z0-9+.-]*:\\/\\/)[^\\s/@:\"']+:[^\\s/@\"']+@/gi;\nconst BEARER_RE = /\\bBearer\\s+[A-Za-z0-9._~+/=-]+/gi;\nconst JWT_RE = /\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+/g;\nconst EMAIL_RE = /[A-Za-z0-9._%+-]+@([A-Za-z0-9-]+(?:\\.[A-Za-z0-9-]+)*\\.[A-Za-z]{2,})/g;\n\nexport type KeyPattern = string | RegExp;\n\nexport interface RedactorOptions {\n  /** Extra sensitive keys: names (matched like the defaults) or patterns tested on the snake_case key. */\n  keys?: readonly KeyPattern[];\n  /** Extra value patterns; every match inside any string becomes [REDACTED]. */\n  values?: readonly RegExp[];\n}\n\nexport interface Redactor {\n  isSensitive(key: string): boolean;\n  /** Masks secrets and emails that appear inside free text. */\n  scrub(s: string): string;\n  /** JSON.stringify that redacts sensitive keys at any depth and never throws. */\n  json(value: unknown): string;\n}\n\nfunction globalize(re: RegExp): RegExp {\n  return re.flags.includes(\"g\") ? new RegExp(re.source, re.flags) : new RegExp(re.source, `${re.flags}g`);\n}\n\nexport function createRedactor(opts: RedactorOptions = {}): Redactor {\n  const words = [...DEFAULT_REDACT_KEYS];\n  const keyPatterns: RegExp[] = [];\n  for (const k of opts.keys ?? []) {\n    if (typeof k === \"string\") words.push(toSnakeCase(k));\n    else keyPatterns.push(new RegExp(k.source, k.flags.replace(\"g\", \"\")));\n  }\n  const valuePatterns = (opts.values ?? []).map(globalize);\n\n  const isSensitive = (key: string): boolean => {\n    const k = toSnakeCase(key);\n    if (keyPatterns.some((re) => re.test(k))) return true;\n    if (!words.includes(k) && SAFE_SUFFIXES.some((s) => k.endsWith(s))) return false;\n    return words.some((w) => k === w || k.startsWith(`${w}_`) || k.endsWith(`_${w}`) || k.includes(`_${w}_`));\n  };\n\n  const scrub = (s: string): string => {\n    let out = s\n      .replace(URL_CREDENTIALS_RE, `$1${REDACTED}@`)\n      .replace(BEARER_RE, `Bearer ${REDACTED}`)\n      .replace(JWT_RE, \"[REDACTED_JWT]\")\n      .replace(EMAIL_RE, \"***@$1\");\n    for (const re of valuePatterns) out = out.replace(re, REDACTED);\n    return out;\n  };\n\n  const json = (value: unknown): string => {\n    if (typeof value === \"string\") return value;\n    try {\n      const text = JSON.stringify(value, (key, val: unknown) => {\n        if (key && val !== null && val !== undefined && isSensitive(key)) return REDACTED;\n        if (typeof val === \"bigint\") return val.toString();\n        if (val instanceof Error) return { name: val.name, message: val.message };\n        return val;\n      });\n      return text ?? String(value);\n    } catch {\n      return String(value);\n    }\n  };\n\n  return { isSensitive, scrub, json };\n}\n\nexport const defaultRedactor: Redactor = createRedactor();\n","import { globalSingleton } from \"./global\";\nimport { defaultRedactor } from \"./redact\";\n\nexport interface ErrFields {\n  err_type?: string;\n  err_message?: string;\n  err_code?: string;\n  err_stack?: string;\n  err_cause?: string;\n  /** Database errors (pg): the table and constraint the server reported. */\n  db_table?: string;\n  db_constraint?: string;\n}\n\nconst MAX_CAUSE_DEPTH = 5;\n\nexport function isErrorLike(v: unknown): v is Error {\n  if (v instanceof Error) return true;\n  return (\n    typeof v === \"object\" &&\n    v !== null &&\n    typeof (v as { message?: unknown }).message === \"string\" &&\n    (\"stack\" in v || \"name\" in v)\n  );\n}\n\nfunction errorType(e: Error): string {\n  // pg's DatabaseError keeps the lowercase name \"error\"; its class name says more.\n  if (e.name && e.name !== \"Error\" && e.name !== \"error\") return e.name;\n  const ctor = (e as { constructor?: { name?: string } }).constructor?.name;\n  return ctor && ctor !== \"Object\" ? ctor : \"Error\";\n}\n\nexport function serializeError(err: unknown): ErrFields {\n  if (!isErrorLike(err)) {\n    if (typeof err === \"string\") return { err_type: \"string\", err_message: err };\n    return { err_type: typeof err, err_message: defaultRedactor.json(err) };\n  }\n  const e = err as Error & { code?: unknown; cause?: unknown; table?: unknown; constraint?: unknown };\n  const message = String(e.message ?? \"\");\n  const out: ErrFields = { err_type: errorType(e), err_message: message };\n  if (e.code !== undefined && e.code !== null) out.err_code = String(e.code);\n  out.err_message = cleanMessage(message, out.err_code);\n  if (isSqlState(out.err_code)) {\n    if (typeof e.table === \"string\" && e.table) out.db_table = e.table;\n    if (typeof e.constraint === \"string\" && e.constraint) out.db_constraint = e.constraint;\n  }\n  if (typeof e.stack === \"string\") out.err_stack = replaceOnce(e.stack, message, out.err_message);\n\n  const causes: string[] = [];\n  let cause = e.cause;\n  while (cause !== undefined && cause !== null && causes.length < MAX_CAUSE_DEPTH) {\n    if (isErrorLike(cause)) {\n      const code = (cause as { code?: unknown }).code;\n      const causeCode = code === undefined || code === null ? undefined : String(code);\n      causes.push(`${errorType(cause)}: ${cleanMessage(String(cause.message ?? \"\"), causeCode)}`);\n      cause = (cause as { cause?: unknown }).cause;\n    } else {\n      causes.push(defaultRedactor.json(cause));\n      cause = undefined;\n    }\n  }\n  if (causes.length > 0) out.err_cause = causes.join(\" <- \");\n  return out;\n}\n\n// Postgres SQLSTATE codes: five digits or uppercase letters (23505, 40P01, 25P02).\nfunction isSqlState(code: string | undefined): boolean {\n  return code !== undefined && /^[0-9A-Z]{5}$/.test(code);\n}\n\n// A statement, optionally behind comments or opening parentheses (\"(select ...) union ...\").\nconst SQL_START_RE = /^\\s*(?:\\/\\*[\\s\\S]*?\\*\\/\\s*)*\\(*\\s*(?:select|insert|update|delete|with|create|alter|drop|truncate|lock)\\b/i;\n// Without a SQLSTATE code, the part before \" - \" must also read like SQL, so a message such as\n// \"Update failed - retry later\" stays whole.\nconst SQL_BODY_RE = /[\"`]|\\b(?:from|into|set|values|where|table|returning)\\b/i;\n\n/**\n * knex prefixes every failed query's message with the statement, whatever the driver or error\n * (pg with or without a SQLSTATE, MySQL ER_*, SQLite, \"Connection terminated\"). Drops it.\n */\nfunction cleanMessage(message: string, code: string | undefined): string {\n  const at = message.lastIndexOf(\" - \");\n  if (at === -1 || !SQL_START_RE.test(message)) return message;\n  if (!isSqlState(code) && !SQL_BODY_RE.test(message.slice(0, at))) return message;\n  return stripSql(message);\n}\n\n// V8 renders the stack's first line from the message when .stack is first read. For knex errors\n// that is after the statement was prefixed, so the stack repeats it.\nfunction replaceOnce(text: string, find: string, replacement: string | undefined): string {\n  if (replacement === undefined || find === replacement || find === \"\") return text;\n  const at = text.indexOf(find);\n  return at === -1 ? text : text.slice(0, at) + replacement + text.slice(at + find.length);\n}\n\n/**\n * knex prefixes a failed query's message with the whole statement (\"update ... - deadlock\n * detected\"). A long statement filled err_message and the truncation cut off the server's reason,\n * the only part worth reading. Keeps the reason; the statement never reaches the log. Cuts at the\n * last \" - \": a reason that contains \" - \" loses its start, which is safer than keeping part of a\n * statement that contains one (arithmetic, string literals).\n */\nexport function stripSql(message: string): string {\n  if (!SQL_START_RE.test(message)) return message;\n  const at = message.lastIndexOf(\" - \");\n  return at === -1 ? message : message.slice(at + 3);\n}\n\n/**\n * For errors Koa emits on the inbound socket (strapiServerErrors): the client hung up or sent a\n * malformed request. Not valid for errors in general: knex's pool rejects with Error(\"aborted\")\n * when it is destroyed, and pg or outbound sockets reset with ECONNRESET.\n */\nexport function isClientDisconnect(err: unknown): boolean {\n  const e = err as { code?: unknown; message?: unknown } | null;\n  const code = typeof e?.code === \"string\" ? e.code : \"\";\n  return (\n    code === \"ECONNRESET\" ||\n    code === \"ECONNABORTED\" ||\n    code === \"EPIPE\" ||\n    code === \"ERR_STREAM_PREMATURE_CLOSE\" ||\n    code.startsWith(\"HPE_\") ||\n    e?.message === \"aborted\"\n  );\n}\n\nconst logged = globalSingleton(\"logged\", () => new WeakSet<object>());\n\n// Marks an error as already written, so a later boundary (e.g. Next's onRequestError)\n// does not log it a second time.\nexport function markLogged(err: unknown): void {\n  if (typeof err === \"object\" && err !== null) logged.add(err);\n}\n\nexport function isLogged(err: unknown): boolean {\n  return typeof err === \"object\" && err !== null && logged.has(err);\n}\n","import { isErrorLike, serializeError } from \"./error\";\nimport type { Level } from \"./levels\";\nimport { REDACTED, toSnakeCase, type Redactor } from \"./redact\";\n\nexport { DEFAULT_REDACT_KEYS, toSnakeCase } from \"./redact\";\n\n/** Final per-field hook: return a replacement, or undefined to drop the field. */\nexport type RedactHook = (key: string, value: Primitive) => unknown;\n\nexport type Fields = Record<string, unknown>;\nexport type Primitive = string | number | boolean | null;\nexport type LogRecord = Record<string, Primitive>;\n\nexport interface NormalizeOptions {\n  snakeCase: boolean;\n  redactor: Redactor;\n  hook?: RedactHook;\n}\n\n// Fields the redact hook never sees, so every line keeps its level, message and event.\nconst HOOK_EXEMPT = new Set([\"level\", \"message\", \"event\"]);\n\n// Keys owned by Vector (overwritten or deleted on ingest) or by the logger itself.\nexport const RESERVED_KEYS = new Set([\n  \"project\", \"service\", \"vps\", \"version\", \"container_name\", \"container_id\", \"image\", \"stream\",\n  \"_timestamp\", \"label\", \"host\", \"source_type\", \"msg\", \"lvl\", \"severity\", \"level\", \"message\",\n]);\n\nexport const MAX_LINE_BYTES = 16000;\nconst MAX_MESSAGE = 500;\nconst MAX_STACK = 4000;\nconst MAX_STRING = 1000;\nconst MAX_DEPTH = 3;\nconst TRUNCATED = \"…[truncated]\";\n\n// Fields kept when a line is too large.\nconst KEEP_ON_SHRINK = new Set([\n  \"level\", \"message\", \"event\", \"request_id\", \"trace_id\", \"span_id\", \"job_name\", \"job_id\", \"job_attempt\",\n  \"user_id\", \"tenant_id\", \"err_type\", \"err_message\", \"err_code\",\n]);\n\nexport function stripUrl(url: string): string {\n  const noQuery = url.split(/[?#]/, 1)[0] ?? \"\";\n  return noQuery.replace(/^([a-z][a-z0-9+.-]*:\\/\\/)[^/@\\s]*@/i, \"$1\");\n}\n\nexport function truncate(s: string, max: number): string {\n  return s.length > max ? s.slice(0, max - TRUNCATED.length) + TRUNCATED : s;\n}\n\nfunction isPlainObject(v: unknown): v is Fields {\n  if (typeof v !== \"object\" || v === null) return false;\n  const proto = Object.getPrototypeOf(v);\n  return proto === Object.prototype || proto === null;\n}\n\nfunction isUrlKey(key: string): boolean {\n  return key === \"http_path\" || key === \"http_url\" || key.endsWith(\"_url\");\n}\n\nfunction flattenInto(out: LogRecord, prefix: string, obj: Fields, depth: number, opts: NormalizeOptions): void {\n  for (const [rawKey, value] of Object.entries(obj)) {\n    const key = opts.snakeCase ? toSnakeCase(rawKey) : rawKey;\n    const full = prefix ? `${prefix}_${key}` : key;\n    if (value === undefined || typeof value === \"function\" || typeof value === \"symbol\") continue;\n    if (value !== null && (opts.redactor.isSensitive(rawKey) || opts.redactor.isSensitive(full))) {\n      out[full] = REDACTED;\n      continue;\n    }\n    if (value === null || typeof value === \"string\" || typeof value === \"boolean\") {\n      out[full] = value;\n    } else if (typeof value === \"number\") {\n      out[full] = Number.isFinite(value) ? value : String(value);\n    } else if (typeof value === \"bigint\") {\n      out[full] = value.toString();\n    } else if (value instanceof Date) {\n      out[full] = Number.isNaN(value.getTime()) ? \"Invalid Date\" : value.toISOString();\n    } else if (isErrorLike(value)) {\n      out[full] = `${value.name}: ${value.message}`;\n    } else if (isPlainObject(value) && depth < MAX_DEPTH - 1) {\n      flattenInto(out, full, value, depth + 1, opts);\n    } else {\n      // Arrays, deep objects, class instances: stringified with sensitive keys redacted.\n      out[full] = opts.redactor.json(value);\n    }\n  }\n}\n\n// Correlation ids are opaque tokens: value patterns such as phoneVN can match inside a hex\n// segment and break the join between services, so a well-formed id is never scrubbed.\nconst ID_VALUE_RE = /^[A-Za-z0-9._:-]{1,128}$/;\n\nfunction isIdKey(key: string): boolean {\n  return key === \"request_id\" || key === \"trace_id\" || key === \"span_id\" || key.endsWith(\"_request_id\");\n}\n\nfunction finalize(key: string, value: Primitive, opts: NormalizeOptions): Primitive {\n  if (typeof value !== \"string\") return value;\n  if (isIdKey(key) && ID_VALUE_RE.test(value)) return value;\n  const v = opts.redactor.scrub(isUrlKey(key) ? stripUrl(value) : value);\n  return truncate(v, key === \"err_stack\" ? MAX_STACK : MAX_STRING);\n}\n\nexport function buildRecord(\n  level: Level,\n  message: unknown,\n  sources: (Fields | undefined)[],\n  opts: NormalizeOptions,\n): LogRecord {\n  const merged: Fields = {};\n  for (const source of sources) if (source) Object.assign(merged, source);\n\n  let err: unknown;\n  if (merged.err !== undefined && merged.err !== null) {\n    err = merged.err;\n    delete merged.err;\n  } else if (isErrorLike(merged.error)) {\n    err = merged.error;\n    delete merged.error;\n  }\n\n  const flat: LogRecord = {};\n  flattenInto(flat, \"\", merged, 0, opts);\n  if (err !== undefined) Object.assign(flat, serializeError(err));\n\n  const text = typeof message === \"string\" ? message : opts.redactor.json(message);\n  const out: LogRecord = { level, message: truncate(opts.redactor.scrub(text), MAX_MESSAGE) };\n  for (const [k, v] of Object.entries(flat)) {\n    const key = RESERVED_KEYS.has(k) ? `app_${k}` : k;\n    let value = finalize(key, v, opts);\n    if (opts.hook && !HOOK_EXEMPT.has(key)) {\n      const replaced = opts.hook(key, value);\n      if (replaced === undefined) continue;\n      value = typeof replaced === \"object\" && replaced !== null ? opts.redactor.json(replaced) : (replaced as Primitive);\n    }\n    out[key] = value;\n  }\n  return out;\n}\n\nfunction byteLength(s: string): number {\n  // UTF-8 uses at most 3 bytes per UTF-16 code unit: skip encoding short lines.\n  if (s.length * 3 <= MAX_LINE_BYTES) return s.length;\n  return new TextEncoder().encode(s).length;\n}\n\nexport function serializeRecord(record: LogRecord): string {\n  const line = JSON.stringify(record);\n  if (byteLength(line) <= MAX_LINE_BYTES) return line;\n  const small: LogRecord = {};\n  for (const [k, v] of Object.entries(record)) {\n    if (KEEP_ON_SHRINK.has(k) || k.startsWith(\"http_\")) small[k] = v;\n  }\n  small.log_truncated = true;\n  return JSON.stringify(small);\n}\n","// No imports: this module is shared with the edge entry (next-edge).\nexport const REQUEST_ID_RE = /^[A-Za-z0-9._-]{1,64}$/;\nconst TRACEPARENT_RE = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/;\n\nexport function newRequestId(): string {\n  return globalThis.crypto.randomUUID();\n}\n\nfunction first(header?: string | string[] | null): string | undefined {\n  return Array.isArray(header) ? header[0] : (header ?? undefined);\n}\n\nexport function resolveRequestId(header?: string | string[] | null): string {\n  const value = first(header);\n  return value && REQUEST_ID_RE.test(value) ? value : newRequestId();\n}\n\nexport function parseTraceparent(header?: string | string[] | null): { trace_id: string; span_id: string } | undefined {\n  const value = first(header)?.trim().toLowerCase();\n  const m = value ? TRACEPARENT_RE.exec(value) : null;\n  if (!m) return undefined;\n  const [, version, traceId, spanId] = m as unknown as [string, string, string, string];\n  if (version === \"ff\" || /^0+$/.test(traceId) || /^0+$/.test(spanId)) return undefined;\n  return { trace_id: traceId, span_id: spanId };\n}\n","import { getContext } from \"./context\";\nimport { markLogged, serializeError } from \"./error\";\nimport type { Logger } from \"./logger\";\nimport { stripUrl, type Fields } from \"./normalize\";\nimport { parseTraceparent, resolveRequestId } from \"./request-id\";\n\nexport { newRequestId, parseTraceparent, REQUEST_ID_RE, resolveRequestId } from \"./request-id\";\n\nexport type HeaderSource = Headers | Record<string, string | string[] | undefined>;\n\nfunction header(headers: HeaderSource, name: string): string | string[] | undefined {\n  if (typeof (headers as Headers).get === \"function\") return (headers as Headers).get(name) ?? undefined;\n  return (headers as Record<string, string | string[] | undefined>)[name];\n}\n\nexport function requestContextFields(headers: HeaderSource): { request_id: string; trace_id?: string; span_id?: string } {\n  const out: { request_id: string; trace_id?: string; span_id?: string } = {\n    request_id: resolveRequestId(header(headers, \"x-request-id\")),\n  };\n  const tp = parseTraceparent(header(headers, \"traceparent\"));\n  if (tp) Object.assign(out, tp);\n  return out;\n}\n\n// Headers to forward to services we own, so their logs share request_id / trace_id.\nexport function propagationHeaders(): Record<string, string> {\n  const ctx = getContext();\n  const out: Record<string, string> = {};\n  if (typeof ctx.request_id === \"string\") out[\"x-request-id\"] = ctx.request_id;\n  if (typeof ctx.trace_id === \"string\" && typeof ctx.span_id === \"string\") {\n    out.traceparent = `00-${ctx.trace_id}-${ctx.span_id}-01`;\n  }\n  return out;\n}\n\nexport const DEFAULT_SKIP_PATHS: (string | RegExp)[] = [\n  // Also under a prefix such as /api/v1/health.\n  /(^|\\/)(health|healthz|ready|readyz|livez)\\/?$/,\n  \"/favicon.ico\",\n  /^\\/_next\\/static\\//,\n];\n\nexport interface HttpLogOptions {\n  skipPaths?: (string | RegExp)[];\n}\n\nexport interface HttpRequestInfo {\n  method: string;\n  route?: string;\n  path: string;\n  status: number;\n  duration_ms?: number;\n  err?: unknown;\n  fields?: Fields;\n}\n\nexport function shouldSkip(method: string, path: string, skipPaths: (string | RegExp)[] = DEFAULT_SKIP_PATHS): boolean {\n  if (method.toUpperCase() === \"OPTIONS\") return true;\n  const p = stripUrl(path);\n  return skipPaths.some((s) => (typeof s === \"string\" ? p === s : s.test(p)));\n}\n\n// Writes the one `http.request` summary line for an inbound request. Skipped paths are still\n// logged when they fail with a 5xx, so a failing health check stays visible.\nexport function logHttpRequest(log: Logger, info: HttpRequestInfo, opts: HttpLogOptions = {}): void {\n  if (info.status < 500 && shouldSkip(info.method, info.path, opts.skipPaths)) return;\n  // The level follows the status only. An error's shape cannot tell a client hang-up apart:\n  // knex's pool (tarn) rejects in-flight queries with Error(\"aborted\") when it is destroyed on\n  // shutdown, and a pg or outbound socket reset is ECONNRESET too. Both are server-side failures.\n  const level = info.status >= 500 ? \"error\" : info.status >= 400 ? \"warn\" : \"info\";\n  const path = stripUrl(info.path);\n  const errFields: Fields = {};\n  if (info.err !== undefined && info.err !== null) {\n    Object.assign(errFields, serializeError(info.err));\n    if (info.status < 500) delete errFields.err_stack;\n    markLogged(info.err);\n  }\n  // Route templates keep the message bounded; the raw path would make one message per URL.\n  const message = info.route ? `${info.method} ${info.route} ${info.status}` : `${info.method} ${info.status}`;\n  log[level](message, {\n    ...info.fields,\n    event: \"http.request\",\n    http_method: info.method,\n    http_route: info.route,\n    http_path: path,\n    http_status: info.status,\n    duration_ms: info.duration_ms === undefined ? undefined : Math.round(info.duration_ms),\n    ...errFields,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,8BAAkC;;;ACE3B,SAAS,gBAAmB,MAAc,MAAkB;AACjE,QAAM,MAAM,uBAAO,IAAI,iBAAiB,IAAI,EAAE;AAC9C,QAAM,IAAI;AACV,MAAI,QAAQ,EAAE,GAAG;AACjB,MAAI,UAAU,QAAW;AACvB,YAAQ,KAAK;AACb,MAAE,GAAG,IAAI;AAAA,EACX;AACA,SAAO;AACT;;;ADCA,IAAM,MAAM,gBAAgB,OAAO,MAAM,IAAI,0CAAgC,CAAC;AAEvE,IAAM,YAAoB,uBAAO,IAAI,qBAAqB;AAE1D,SAAS,aAAgB,QAAgB,IAAmC;AACjF,QAAM,SAAS,IAAI,SAAS;AAC5B,QAAM,QAAsB,EAAE,QAAQ,EAAE,GAAG,QAAQ,QAAQ,GAAG,OAAO,GAAG,OAAO;AAC/E,SAAO,IAAI,IAAI,OAAO,MAAM,GAAG,KAAK,CAAC;AACvC;AAqBO,SAAS,cAAc,OAAqB,KAAoB;AACrE,QAAM,QAAQ;AACd,WAAS,IAAI,MAAM,QAAQ,GAAG,IAAI,EAAE,OAAQ,KAAI,EAAE,UAAU,OAAW,GAAE,QAAQ;AACnF;AAQO,SAAS,YAAY,QAAgB,OAA2B;AACrE,EAAC,OAAwC,SAAS,IAAI;AACxD;AAEO,SAAS,QAAQ,QAA2C;AACjE,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,SAAQ,OAAoD,SAAS;AACvE;;;AExDO,IAAM,sBAAsB;AAAA,EACjC;AAAA,EAAY;AAAA,EAAU;AAAA,EAAO;AAAA,EAAc;AAAA,EAAU;AAAA,EACrD;AAAA,EAAS;AAAA,EAAgB;AAAA,EAAiB;AAAA,EAAY;AAAA,EACtD;AAAA,EAAW;AAAA,EAAU;AAAA,EAAc;AAAA,EAAc;AAAA,EACjD;AAAA,EAAiB;AAAA,EAAU;AAAA,EAAc;AAAA,EAAc;AAAA,EACvD;AAAA,EAAc;AAAA,EAAe;AAAA,EAAO;AAAA,EAAqB;AAAA,EAAe;AAAA,EAAO;AACjF;AAiBA,IAAM,gBAAgB,CAAC,UAAU,SAAS,WAAW,eAAe,eAAe,QAAQ,OAAO,OAAO,UAAU;AAE5G,IAAM,WAAW;AAEjB,SAAS,YAAY,KAAqB;AAC/C,SAAO,IACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,yBAAyB,OAAO,EACxC,QAAQ,mBAAmB,GAAG,EAC9B,YAAY;AACjB;AAEA,IAAM,qBAAqB;AAC3B,IAAM,YAAY;AAClB,IAAM,SAAS;AACf,IAAM,WAAW;AAmBjB,SAAS,UAAU,IAAoB;AACrC,SAAO,GAAG,MAAM,SAAS,GAAG,IAAI,IAAI,OAAO,GAAG,QAAQ,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,QAAQ,GAAG,GAAG,KAAK,GAAG;AACxG;AAEO,SAAS,eAAe,OAAwB,CAAC,GAAa;AACnE,QAAM,QAAQ,CAAC,GAAG,mBAAmB;AACrC,QAAM,cAAwB,CAAC;AAC/B,aAAW,KAAK,KAAK,QAAQ,CAAC,GAAG;AAC/B,QAAI,OAAO,MAAM,SAAU,OAAM,KAAK,YAAY,CAAC,CAAC;AAAA,QAC/C,aAAY,KAAK,IAAI,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,KAAK,EAAE,CAAC,CAAC;AAAA,EACtE;AACA,QAAM,iBAAiB,KAAK,UAAU,CAAC,GAAG,IAAI,SAAS;AAEvD,QAAM,cAAc,CAAC,QAAyB;AAC5C,UAAM,IAAI,YAAY,GAAG;AACzB,QAAI,YAAY,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,EAAG,QAAO;AACjD,QAAI,CAAC,MAAM,SAAS,CAAC,KAAK,cAAc,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAG,QAAO;AAC3E,WAAO,MAAM,KAAK,CAAC,MAAM,MAAM,KAAK,EAAE,WAAW,GAAG,CAAC,GAAG,KAAK,EAAE,SAAS,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,GAAG,CAAC;AAAA,EAC1G;AAEA,QAAM,QAAQ,CAAC,MAAsB;AACnC,QAAI,MAAM,EACP,QAAQ,oBAAoB,KAAK,QAAQ,GAAG,EAC5C,QAAQ,WAAW,UAAU,QAAQ,EAAE,EACvC,QAAQ,QAAQ,gBAAgB,EAChC,QAAQ,UAAU,QAAQ;AAC7B,eAAW,MAAM,cAAe,OAAM,IAAI,QAAQ,IAAI,QAAQ;AAC9D,WAAO;AAAA,EACT;AAEA,QAAM,OAAO,CAAC,UAA2B;AACvC,QAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAI;AACF,YAAM,OAAO,KAAK,UAAU,OAAO,CAAC,KAAK,QAAiB;AACxD,YAAI,OAAO,QAAQ,QAAQ,QAAQ,UAAa,YAAY,GAAG,EAAG,QAAO;AACzE,YAAI,OAAO,QAAQ,SAAU,QAAO,IAAI,SAAS;AACjD,YAAI,eAAe,MAAO,QAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ;AACxE,eAAO;AAAA,MACT,CAAC;AACD,aAAO,QAAQ,OAAO,KAAK;AAAA,IAC7B,QAAQ;AACN,aAAO,OAAO,KAAK;AAAA,IACrB;AAAA,EACF;AAEA,SAAO,EAAE,aAAa,OAAO,KAAK;AACpC;AAEO,IAAM,kBAA4B,eAAe;;;AC9FxD,IAAM,kBAAkB;AAEjB,SAAS,YAAY,GAAwB;AAClD,MAAI,aAAa,MAAO,QAAO;AAC/B,SACE,OAAO,MAAM,YACb,MAAM,QACN,OAAQ,EAA4B,YAAY,aAC/C,WAAW,KAAK,UAAU;AAE/B;AAEA,SAAS,UAAU,GAAkB;AAEnC,MAAI,EAAE,QAAQ,EAAE,SAAS,WAAW,EAAE,SAAS,QAAS,QAAO,EAAE;AACjE,QAAM,OAAQ,EAA0C,aAAa;AACrE,SAAO,QAAQ,SAAS,WAAW,OAAO;AAC5C;AAEO,SAAS,eAAe,KAAyB;AACtD,MAAI,CAAC,YAAY,GAAG,GAAG;AACrB,QAAI,OAAO,QAAQ,SAAU,QAAO,EAAE,UAAU,UAAU,aAAa,IAAI;AAC3E,WAAO,EAAE,UAAU,OAAO,KAAK,aAAa,gBAAgB,KAAK,GAAG,EAAE;AAAA,EACxE;AACA,QAAM,IAAI;AACV,QAAM,UAAU,OAAO,EAAE,WAAW,EAAE;AACtC,QAAM,MAAiB,EAAE,UAAU,UAAU,CAAC,GAAG,aAAa,QAAQ;AACtE,MAAI,EAAE,SAAS,UAAa,EAAE,SAAS,KAAM,KAAI,WAAW,OAAO,EAAE,IAAI;AACzE,MAAI,cAAc,aAAa,SAAS,IAAI,QAAQ;AACpD,MAAI,WAAW,IAAI,QAAQ,GAAG;AAC5B,QAAI,OAAO,EAAE,UAAU,YAAY,EAAE,MAAO,KAAI,WAAW,EAAE;AAC7D,QAAI,OAAO,EAAE,eAAe,YAAY,EAAE,WAAY,KAAI,gBAAgB,EAAE;AAAA,EAC9E;AACA,MAAI,OAAO,EAAE,UAAU,SAAU,KAAI,YAAY,YAAY,EAAE,OAAO,SAAS,IAAI,WAAW;AAE9F,QAAM,SAAmB,CAAC;AAC1B,MAAI,QAAQ,EAAE;AACd,SAAO,UAAU,UAAa,UAAU,QAAQ,OAAO,SAAS,iBAAiB;AAC/E,QAAI,YAAY,KAAK,GAAG;AACtB,YAAM,OAAQ,MAA6B;AAC3C,YAAM,YAAY,SAAS,UAAa,SAAS,OAAO,SAAY,OAAO,IAAI;AAC/E,aAAO,KAAK,GAAG,UAAU,KAAK,CAAC,KAAK,aAAa,OAAO,MAAM,WAAW,EAAE,GAAG,SAAS,CAAC,EAAE;AAC1F,cAAS,MAA8B;AAAA,IACzC,OAAO;AACL,aAAO,KAAK,gBAAgB,KAAK,KAAK,CAAC;AACvC,cAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,OAAO,SAAS,EAAG,KAAI,YAAY,OAAO,KAAK,MAAM;AACzD,SAAO;AACT;AAGA,SAAS,WAAW,MAAmC;AACrD,SAAO,SAAS,UAAa,gBAAgB,KAAK,IAAI;AACxD;AAGA,IAAM,eAAe;AAGrB,IAAM,cAAc;AAMpB,SAAS,aAAa,SAAiB,MAAkC;AACvE,QAAM,KAAK,QAAQ,YAAY,KAAK;AACpC,MAAI,OAAO,MAAM,CAAC,aAAa,KAAK,OAAO,EAAG,QAAO;AACrD,MAAI,CAAC,WAAW,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,MAAM,GAAG,EAAE,CAAC,EAAG,QAAO;AACzE,SAAO,SAAS,OAAO;AACzB;AAIA,SAAS,YAAY,MAAc,MAAc,aAAyC;AACxF,MAAI,gBAAgB,UAAa,SAAS,eAAe,SAAS,GAAI,QAAO;AAC7E,QAAM,KAAK,KAAK,QAAQ,IAAI;AAC5B,SAAO,OAAO,KAAK,OAAO,KAAK,MAAM,GAAG,EAAE,IAAI,cAAc,KAAK,MAAM,KAAK,KAAK,MAAM;AACzF;AASO,SAAS,SAAS,SAAyB;AAChD,MAAI,CAAC,aAAa,KAAK,OAAO,EAAG,QAAO;AACxC,QAAM,KAAK,QAAQ,YAAY,KAAK;AACpC,SAAO,OAAO,KAAK,UAAU,QAAQ,MAAM,KAAK,CAAC;AACnD;AAoBA,IAAM,SAAS,gBAAgB,UAAU,MAAM,oBAAI,QAAgB,CAAC;AAI7D,SAAS,WAAW,KAAoB;AAC7C,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO,IAAI,GAAG;AAC7D;;;AC5FO,SAAS,SAAS,KAAqB;AAC5C,QAAM,UAAU,IAAI,MAAM,QAAQ,CAAC,EAAE,CAAC,KAAK;AAC3C,SAAO,QAAQ,QAAQ,uCAAuC,IAAI;AACpE;;;AC3CO,IAAM,gBAAgB;AAC7B,IAAM,iBAAiB;AAEhB,SAAS,eAAuB;AACrC,SAAO,WAAW,OAAO,WAAW;AACtC;AAEA,SAAS,MAAMA,SAAuD;AACpE,SAAO,MAAM,QAAQA,OAAM,IAAIA,QAAO,CAAC,IAAKA,WAAU;AACxD;AAEO,SAAS,iBAAiBA,SAA2C;AAC1E,QAAM,QAAQ,MAAMA,OAAM;AAC1B,SAAO,SAAS,cAAc,KAAK,KAAK,IAAI,QAAQ,aAAa;AACnE;AAEO,SAAS,iBAAiBA,SAAsF;AACrH,QAAM,QAAQ,MAAMA,OAAM,GAAG,KAAK,EAAE,YAAY;AAChD,QAAM,IAAI,QAAQ,eAAe,KAAK,KAAK,IAAI;AAC/C,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,CAAC,EAAE,SAAS,SAAS,MAAM,IAAI;AACrC,MAAI,YAAY,QAAQ,OAAO,KAAK,OAAO,KAAK,OAAO,KAAK,MAAM,EAAG,QAAO;AAC5E,SAAO,EAAE,UAAU,SAAS,SAAS,OAAO;AAC9C;;;ACdA,SAAS,OAAO,SAAuB,MAA6C;AAClF,MAAI,OAAQ,QAAoB,QAAQ,WAAY,QAAQ,QAAoB,IAAI,IAAI,KAAK;AAC7F,SAAQ,QAA0D,IAAI;AACxE;AAEO,SAAS,qBAAqB,SAAoF;AACvH,QAAM,MAAmE;AAAA,IACvE,YAAY,iBAAiB,OAAO,SAAS,cAAc,CAAC;AAAA,EAC9D;AACA,QAAM,KAAK,iBAAiB,OAAO,SAAS,aAAa,CAAC;AAC1D,MAAI,GAAI,QAAO,OAAO,KAAK,EAAE;AAC7B,SAAO;AACT;AAaO,IAAM,qBAA0C;AAAA;AAAA,EAErD;AAAA,EACA;AAAA,EACA;AACF;AAgBO,SAAS,WAAW,QAAgB,MAAc,YAAiC,oBAA6B;AACrH,MAAI,OAAO,YAAY,MAAM,UAAW,QAAO;AAC/C,QAAM,IAAI,SAAS,IAAI;AACvB,SAAO,UAAU,KAAK,CAAC,MAAO,OAAO,MAAM,WAAW,MAAM,IAAI,EAAE,KAAK,CAAC,CAAE;AAC5E;AAIO,SAAS,eAAe,KAAa,MAAuB,OAAuB,CAAC,GAAS;AAClG,MAAI,KAAK,SAAS,OAAO,WAAW,KAAK,QAAQ,KAAK,MAAM,KAAK,SAAS,EAAG;AAI7E,QAAM,QAAQ,KAAK,UAAU,MAAM,UAAU,KAAK,UAAU,MAAM,SAAS;AAC3E,QAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,QAAM,YAAoB,CAAC;AAC3B,MAAI,KAAK,QAAQ,UAAa,KAAK,QAAQ,MAAM;AAC/C,WAAO,OAAO,WAAW,eAAe,KAAK,GAAG,CAAC;AACjD,QAAI,KAAK,SAAS,IAAK,QAAO,UAAU;AACxC,eAAW,KAAK,GAAG;AAAA,EACrB;AAEA,QAAM,UAAU,KAAK,QAAQ,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,KAAK,MAAM,IAAI,KAAK,MAAM;AAC1G,MAAI,KAAK,EAAE,SAAS;AAAA,IAClB,GAAG,KAAK;AAAA,IACR,OAAO;AAAA,IACP,aAAa,KAAK;AAAA,IAClB,YAAY,KAAK;AAAA,IACjB,WAAW;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK,gBAAgB,SAAY,SAAY,KAAK,MAAM,KAAK,WAAW;AAAA,IACrF,GAAG;AAAA,EACL,CAAC;AACH;;;APhFA,IAAM,SAAS,oBAAI,QAAwB;AAC3C,IAAM,WAAW,oBAAI,QAAgB;AAErC,IAAM,SAAsD,CAAC,KAAK,MAAM,SAAS;AAC/E,QAAM,UAAU,CAAC,KAAqB,WAAmB;AACvD,QAAI,SAAS,IAAI,GAAG,EAAG;AACvB,aAAS,IAAI,GAAG;AAChB,UAAM,QAAQ,QAAQ,GAAG;AACzB,UAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B;AAAA,MACE,KAAK;AAAA,MACL;AAAA,QACE,QAAQ,IAAI;AAAA,QACZ,OAAO,IAAI,cAAc;AAAA,QACzB,MAAM,IAAI;AAAA,QACV;AAAA,QACA,aAAa,UAAU,SAAY,SAAY,YAAY,IAAI,IAAI;AAAA,QACnE,KAAK,OAAO;AAAA,QACZ,QAAQ,OAAO;AAAA,MACjB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,aAAa,CAAC,KAAK,OAAO,SAAS;AAC7C,UAAM,MAAM,qBAAqB,IAAI,OAAO;AAC5C,UAAM,OAAO,gBAAgB,IAAI,UAAU;AAC3C,WAAO,IAAI,KAAK,YAAY,IAAI,CAAC;AACjC,iBAAa,KAAK,CAAC,UAAU;AAC3B,kBAAY,KAAK,KAAK;AACtB,kBAAY,OAAO,KAAK;AACxB,WAAK;AAAA,IACP,CAAC;AAAA,EACH,CAAC;AACD,MAAI,QAAQ,WAAW,CAAC,MAAM,OAAO,KAAK,SAAS;AACjD,UAAM,QAAQ,QAAQ,KAAK;AAC3B,QAAI,MAAO,eAAc,OAAO,GAAG;AACnC,SAAK;AAAA,EACP,CAAC;AACD,MAAI,QAAQ,cAAc,CAAC,KAAK,OAAO,SAAS;AAC9C,YAAQ,KAAK,MAAM,UAAU;AAC7B,SAAK;AAAA,EACP,CAAC;AAED,MAAI,QAAQ,kBAAkB,CAAC,KAAK,SAAS;AAC3C,YAAQ,KAAK,GAAG;AAChB,SAAK;AAAA,EACP,CAAC;AACD,OAAK;AACP;AAGC,OAA8C,uBAAO,IAAI,eAAe,CAAC,IAAI;AAEvE,IAAM,gBAAgB;","names":["header"]}

package/dist/fastify.d.cts

@@ -1,6 +1,6 @@
 import { FastifyPluginCallback } from 'fastify';
-import { H as HttpLogOptions } from './http-BQJkHBwQ.cjs';
-import { L as Logger } from './logger-3Co9eVJf.cjs';
+import { H as HttpLogOptions } from './http-eeog5tR8.cjs';
+import { L as Logger } from './logger-CtlC9SUE.cjs';
 
 interface FastifyLoggerOptions extends HttpLogOptions {
     log: Logger;

package/dist/fastify.d.ts

@@ -1,6 +1,6 @@
 import { FastifyPluginCallback } from 'fastify';
-import { H as HttpLogOptions } from './http-44ztBSXk.js';
-import { L as Logger } from './logger-3Co9eVJf.js';
+import { H as HttpLogOptions } from './http-Dp6Qtr9M.js';
+import { L as Logger } from './logger-CtlC9SUE.js';
 
 interface FastifyLoggerOptions extends HttpLogOptions {
     log: Logger;

package/dist/fastify.js

@@ -1,9 +1,9 @@
 import {
   fastifyLogger
-} from "./chunk-RVETZAK5.js";
-import "./chunk-AF4YR4Y4.js";
+} from "./chunk-RQWNJJIT.js";
+import "./chunk-BFMFXDIJ.js";
 import "./chunk-KLBL7QEN.js";
-import "./chunk-UDS6S22P.js";
+import "./chunk-JKCR57WJ.js";
 export {
   fastifyLogger
 };

package/dist/{http-44ztBSXk.d.ts → http-Dp6Qtr9M.d.ts}

@@ -1,4 +1,4 @@
-import { F as Fields, L as Logger } from './logger-3Co9eVJf.js';
+import { F as Fields, L as Logger } from './logger-CtlC9SUE.js';
 
 type HeaderSource = Headers | Record<string, string | string[] | undefined>;
 declare function requestContextFields(headers: HeaderSource): {

package/dist/{http-BQJkHBwQ.d.cts → http-eeog5tR8.d.cts}

@@ -1,4 +1,4 @@
-import { F as Fields, L as Logger } from './logger-3Co9eVJf.cjs';
+import { F as Fields, L as Logger } from './logger-CtlC9SUE.cjs';
 
 type HeaderSource = Headers | Record<string, string | string[] | undefined>;
 declare function requestContextFields(headers: HeaderSource): {

package/dist/index.cjs

@@ -139,10 +139,11 @@ var DEFAULT_REDACT_KEYS = [
 ];
 var REDACT_PATTERNS = {
   /**
-   * Vietnamese mobile numbers: 0912345678, +84912345678, 84912345678. Letters on either side
-   * rule a match out, so hex ids (a UUID segment such as 0912345678e0) are left alone.
+   * Vietnamese mobile numbers: 0912345678, +84912345678, 84912345678, also "SDT0912345678". A
+   * hex letter (a-f) on either side rules a match out, so hex ids (a UUID segment such as
+   * 0912345678e0) are left alone.
    */
-  phoneVN: /(?<![\dA-Za-z+])(?:\+?84|0)[35789]\d{8}(?![\dA-Za-z])/g,
+  phoneVN: /(?<![\dA-Fa-f+])(?:\+?84|0)[35789]\d{8}(?![\dA-Fa-f])/g,
   /** Visa, Mastercard, Amex, Discover-like card numbers, with optional spaces or dashes. */
   paymentCard: /(?<!\d)(?:4\d{3}|5[1-5]\d{2}|2[2-7]\d{2}|3[47]\d{2}|6(?:011|5\d{2}))(?:[ -]?\d{4}){2}[ -]?\d{1,4}(?!\d)/g,
   /** IPv4 addresses. */
@@ -214,19 +215,22 @@ function serializeError(err) {
     return { err_type: typeof err, err_message: defaultRedactor.json(err) };
   }
   const e = err;
-  const out = { err_type: errorType(e), err_message: String(e.message ?? "") };
+  const message = String(e.message ?? "");
+  const out = { err_type: errorType(e), err_message: message };
   if (e.code !== void 0 && e.code !== null) out.err_code = String(e.code);
+  out.err_message = cleanMessage(message, out.err_code);
   if (isSqlState(out.err_code)) {
-    out.err_message = stripSql(out.err_message ?? "");
     if (typeof e.table === "string" && e.table) out.db_table = e.table;
     if (typeof e.constraint === "string" && e.constraint) out.db_constraint = e.constraint;
   }
-  if (typeof e.stack === "string") out.err_stack = e.stack;
+  if (typeof e.stack === "string") out.err_stack = replaceOnce(e.stack, message, out.err_message);
   const causes = [];
   let cause = e.cause;
   while (cause !== void 0 && cause !== null && causes.length < MAX_CAUSE_DEPTH) {
     if (isErrorLike(cause)) {
-      causes.push(`${errorType(cause)}: ${cause.message}`);
+      const code = cause.code;
+      const causeCode = code === void 0 || code === null ? void 0 : String(code);
+      causes.push(`${errorType(cause)}: ${cleanMessage(String(cause.message ?? ""), causeCode)}`);
       cause = cause.cause;
     } else {
       causes.push(defaultRedactor.json(cause));
@@ -239,7 +243,19 @@ function serializeError(err) {
 function isSqlState(code) {
   return code !== void 0 && /^[0-9A-Z]{5}$/.test(code);
 }
-var SQL_START_RE = /^\s*(?:select|insert|update|delete|with|create|alter|drop|truncate|lock)\b/i;
+var SQL_START_RE = /^\s*(?:\/\*[\s\S]*?\*\/\s*)*\(*\s*(?:select|insert|update|delete|with|create|alter|drop|truncate|lock)\b/i;
+var SQL_BODY_RE = /["`]|\b(?:from|into|set|values|where|table|returning)\b/i;
+function cleanMessage(message, code) {
+  const at = message.lastIndexOf(" - ");
+  if (at === -1 || !SQL_START_RE.test(message)) return message;
+  if (!isSqlState(code) && !SQL_BODY_RE.test(message.slice(0, at))) return message;
+  return stripSql(message);
+}
+function replaceOnce(text, find, replacement) {
+  if (replacement === void 0 || find === replacement || find === "") return text;
+  const at = text.indexOf(find);
+  return at === -1 ? text : text.slice(0, at) + replacement + text.slice(at + find.length);
+}
 function stripSql(message) {
   if (!SQL_START_RE.test(message)) return message;
   const at = message.lastIndexOf(" - ");
@@ -572,15 +588,12 @@ function shouldSkip(method, path, skipPaths = DEFAULT_SKIP_PATHS) {
 }
 function logHttpRequest(log, info, opts = {}) {
   if (info.status < 500 && shouldSkip(info.method, info.path, opts.skipPaths)) return;
-  const hasErr = info.err !== void 0 && info.err !== null;
-  const clientGone = hasErr && isClientDisconnect(info.err);
-  const level = info.status >= 500 && !clientGone ? "error" : info.status >= 400 ? "warn" : "info";
+  const level = info.status >= 500 ? "error" : info.status >= 400 ? "warn" : "info";
   const path = stripUrl(info.path);
   const errFields = {};
-  if (hasErr) {
+  if (info.err !== void 0 && info.err !== null) {
     Object.assign(errFields, serializeError(info.err));
-    if (info.status < 500 || clientGone) delete errFields.err_stack;
-    if (clientGone) errFields.client_disconnect = true;
+    if (info.status < 500) delete errFields.err_stack;
     markLogged(info.err);
   }
   const message = info.route ? `${info.method} ${info.route} ${info.status}` : `${info.method} ${info.status}`;