@usequeek/app-sdk 0.4.0

package/dist/logger.js

@@ -0,0 +1,75 @@
+/**
+ * ONE structured logger for every Queek app: JSON lines on stdout (info and
+ * below) / stderr (warn and above), with secret redaction baked in — never
+ * opt-in per call site.
+ *
+ * Redacted: any field whose name looks like key/secret/token/password/auth/
+ * credential/session, and any string shaped like an `sk_`/`pk_` key, a
+ * `whsec_` secret, a `Bearer …` token, a bare RS256 JWT (`eyJ….….…`), or a
+ * PEM private-key block — in field values AND in the message. What is left
+ * in the logs is ids and p_ids, which is all an operator needs.
+ */
+const LEVELS = { debug: 0, info: 1, warn: 2, error: 3 };
+const SENSITIVE_KEY_RE = /key|secret|token|passwd|password|auth|credential|session/i;
+// Long opaque values Queek and friends mint: sk_live_/sk_test_, pk_*, whsec_*, Bearer …
+// — plus the S1 app credential shapes, which must NEVER reach logs: a whole PEM
+// private-key block and a bare RS256 JWT (eyJ….….…, with or without a Bearer prefix).
+const SECRET_VALUE_RE = /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]*PRIVATE KEY-----|\b(eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+|sk_(live|test)_[A-Za-z0-9_-]+|pk_(live|test)_[A-Za-z0-9_-]+|whsec_[A-Za-z0-9+/=_-]+|Bearer\s+[A-Za-z0-9._~+/-]+=*)\b/g;
+export const REDACTED = "[redacted]";
+function redactValue(key, value, depth) {
+    if (SENSITIVE_KEY_RE.test(key))
+        return REDACTED;
+    return redactUnknown(value, depth);
+}
+function redactUnknown(value, depth) {
+    if (typeof value === "string") {
+        SECRET_VALUE_RE.lastIndex = 0;
+        return SECRET_VALUE_RE.test(value) ? value.replace(SECRET_VALUE_RE, REDACTED) : value;
+    }
+    if (Array.isArray(value)) {
+        return depth <= 0 ? REDACTED : value.map((item) => redactUnknown(item, depth - 1));
+    }
+    if (typeof value === "object" && value !== null) {
+        if (depth <= 0)
+            return REDACTED;
+        const out = {};
+        for (const [key, entry] of Object.entries(value)) {
+            out[key] = redactValue(key, entry, depth - 1);
+        }
+        return out;
+    }
+    return value;
+}
+export function createLogger(options) {
+    const threshold = LEVELS[options.level ?? process.env.LOG_LEVEL ?? "info"] ?? 1;
+    const sink = options.sink ??
+        ((line, level) => {
+            if (LEVELS[level] >= LEVELS.warn)
+                process.stderr.write(`${line}\n`);
+            else
+                process.stdout.write(`${line}\n`);
+        });
+    const emit = (level, message, fields = {}) => {
+        if (LEVELS[level] < threshold)
+            return;
+        const redactedMessage = redactUnknown(message, 0);
+        const redactedFields = {};
+        for (const [key, value] of Object.entries(fields)) {
+            redactedFields[key] = redactValue(key, value, 4);
+        }
+        sink(JSON.stringify({
+            ts: new Date().toISOString(),
+            level,
+            service: options.service,
+            msg: redactedMessage,
+            ...redactedFields,
+        }), level);
+    };
+    return {
+        debug: (message, fields) => emit("debug", message, fields),
+        info: (message, fields) => emit("info", message, fields),
+        warn: (message, fields) => emit("warn", message, fields),
+        error: (message, fields) => emit("error", message, fields),
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,MAAM,GAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAUlF,MAAM,gBAAgB,GAAG,2DAA2D,CAAC;AACrF,wFAAwF;AACxF,gFAAgF;AAChF,sFAAsF;AACtF,MAAM,eAAe,GACnB,6PAA6P,CAAC;AAEhQ,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC,SAAS,WAAW,CAAC,GAAW,EAAE,KAAc,EAAE,KAAa;IAC7D,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,OAAO,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,eAAe,CAAC,SAAS,GAAG,CAAC,CAAC;QAC9B,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,QAAQ,CAAC;QAChC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAK,OAAO,CAAC,GAAG,CAAC,SAAkC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1G,MAAM,IAAI,GACR,OAAO,CAAC,IAAI;QACZ,CAAC,CAAC,IAAY,EAAE,KAAe,EAAE,EAAE;YACjC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;;gBAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IAEL,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,SAAoB,EAAE,EAAQ,EAAE;QAC9E,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS;YAAE,OAAO;QACtC,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,cAAc,GAA4B,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,cAAc,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CACF,IAAI,CAAC,SAAS,CAAC;YACb,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,KAAK;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,eAAe;YACpB,GAAG,cAAc;SAClB,CAAC,EACF,KAAK,CACN,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QAC1D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACxD,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACxD,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;KAC3D,CAAC;AACJ,CAAC"}