@wildo-ai/saas-backend-lib 1.1.2 → 1.1.3

package/dist/esm/monitoring/logger/models/logger.backend.schemas.d.ts

@@ -10,19 +10,38 @@ import { z } from 'zod';
 export interface PerformanceTimer {
     end(context?: Record<string, unknown>): void;
 }
+/** ──────────────────────────────────────────────────────────────
+ * Internal Schema with z.ZodObject type annotation
+ *
+ * ✅ Preserves all ZodObject methods (.extend, .partial, .omit, .pick, .shape)
+ * ✅ Compatible with isolatedDeclarations: true (OXC)
+ * ────────────────────────────────────────────────────────────── */
+/**
+ * EVERY member here is READ. That is the contract this schema lost and has regained.
+ *
+ * It used to declare five more — `enableConsole`, `enableFile`, `enableDatabase`,
+ * `format` and `metadata` — that no code path could select. Each was removed for its
+ * own reason, recorded so none is reintroduced as an obvious gap:
+ *
+ * - `enableFile` / `enableDatabase` are REDUNDANT, not missing. `otel-preload` fans
+ *   every Pino record out to stdout AND an OTLP collector through the
+ *   `instrumentation-pino` bridge whenever `OBSERVABILITY_TELEMETRY` is selected, and a
+ *   container platform collects stdout regardless. A database sink would additionally
+ *   put log writes on the very datastore whose failure you are diagnosing.
+ * - `format` was a SECOND, dead authority for a decision made elsewhere: pretty-vs-JSON
+ *   is `usePrettyConsole` in `logger.service.ts`, from `LOG_FORMATTED_CONSOLE_ERRORS`
+ *   and the environment. Keeping it invited `format: 'pretty'` and no effect.
+ * - `enableConsole` could not be honoured. The console is what `docker logs` reads and
+ *   what the OTLP bridge WRAPS, so `false` would have to be refused rather than obeyed.
+ * - `metadata` is superseded by pino's `base` (service, environment, hostname, pid) and
+ *   by the `mixin` that stamps `correlationId` on every record inside a request.
+ *
+ * Decided on issue #437 after measuring what OpenTelemetry already carries.
+ */
 export declare const LoggerConfigurationSchema: z.ZodObject<{
     level: z.ZodDefault<z.ZodEnum<typeof LogLevel>>;
     environment: z.ZodDefault<z.ZodEnum<typeof RuntimeEnvironment>>;
     service: z.ZodDefault<z.ZodString>;
-    enableConsole: z.ZodDefault<z.ZodBoolean>;
-    enableFile: z.ZodDefault<z.ZodBoolean>;
-    enableDatabase: z.ZodDefault<z.ZodBoolean>;
-    format: z.ZodDefault<z.ZodEnum<{
-        readonly JSON: "json";
-        readonly PRETTY: "pretty";
-        readonly SIMPLE: "simple";
-    }>>;
-    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>;
     redactFields: z.ZodDefault<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 /** ──────────────────────────────────────────────────────────────

package/dist/esm/monitoring/logger/models/logger.backend.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../../../src/monitoring/logger/models/logger.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;oEAEoE;AAEpE,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,OAAO,CAAC,EAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC/C;AAeD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;iBAUpC,CAAC;AAEH;;oEAEoE;AAEpE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}
+{"version":3,"file":"logger.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../../../src/monitoring/logger/models/logger.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;oEAEoE;AAEpE,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,OAAO,CAAC,EAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC/C;AAED;;;;;oEAKoE;AAEpE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,yBAAyB;;;;;iBAapC,CAAC;AAEH;;oEAEoE;AAEpE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/esm/monitoring/logger/models/logger.backend.schemas.js

@@ -10,20 +10,40 @@ import { z } from 'zod';
  * ✅ Preserves all ZodObject methods (.extend, .partial, .omit, .pick, .shape)
  * ✅ Compatible with isolatedDeclarations: true (OXC)
  * ────────────────────────────────────────────────────────────── */
-const FormatEnum = {
-    JSON: 'json',
-    PRETTY: 'pretty',
-    SIMPLE: 'simple'
-};
+/**
+ * EVERY member here is READ. That is the contract this schema lost and has regained.
+ *
+ * It used to declare five more — `enableConsole`, `enableFile`, `enableDatabase`,
+ * `format` and `metadata` — that no code path could select. Each was removed for its
+ * own reason, recorded so none is reintroduced as an obvious gap:
+ *
+ * - `enableFile` / `enableDatabase` are REDUNDANT, not missing. `otel-preload` fans
+ *   every Pino record out to stdout AND an OTLP collector through the
+ *   `instrumentation-pino` bridge whenever `OBSERVABILITY_TELEMETRY` is selected, and a
+ *   container platform collects stdout regardless. A database sink would additionally
+ *   put log writes on the very datastore whose failure you are diagnosing.
+ * - `format` was a SECOND, dead authority for a decision made elsewhere: pretty-vs-JSON
+ *   is `usePrettyConsole` in `logger.service.ts`, from `LOG_FORMATTED_CONSOLE_ERRORS`
+ *   and the environment. Keeping it invited `format: 'pretty'` and no effect.
+ * - `enableConsole` could not be honoured. The console is what `docker logs` reads and
+ *   what the OTLP bridge WRAPS, so `false` would have to be refused rather than obeyed.
+ * - `metadata` is superseded by pino's `base` (service, environment, hostname, pid) and
+ *   by the `mixin` that stamps `correlationId` on every record inside a request.
+ *
+ * Decided on issue #437 after measuring what OpenTelemetry already carries.
+ */
 export const LoggerConfigurationSchema = z.object({
     level: z.enum(LogLevel).default(LogLevel.INFO),
     environment: z.enum(RuntimeEnvironment).default(RuntimeEnvironment.DEVELOPMENT),
     service: z.string().default('saas-backend'),
-    enableConsole: z.boolean().default(true),
-    enableFile: z.boolean().default(false),
-    enableDatabase: z.boolean().default(false),
-    format: z.enum(FormatEnum).default(FormatEnum.JSON),
-    metadata: z.record(z.string(), z.any()).default(() => ({})),
+    /**
+     * Top-level context keys pino censors, handed straight to `redact.paths`.
+     *
+     * This default is LOAD-BEARING and was inert from 2026-02-23 to 2026-09-08 because
+     * `loadConfiguration` passed `redactFields: []` and a Zod default applies only to an
+     * UNDEFINED key. Never restate it at a construction site — omit the key instead.
+     * Pinned by `logger.service.redaction.test.ts`.
+     */
     redactFields: z.array(z.string()).default(['password', 'secret', 'token', 'key'])
 });
 //# sourceMappingURL=logger.backend.schemas.js.map

package/dist/esm/monitoring/logger/models/logger.backend.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.backend.schemas.js","sourceRoot":"","sources":["../../../../../../src/monitoring/logger/models/logger.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB;;;;;oEAKoE;AAEpE,MAAM,UAAU,GAAG;IACjB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC9C,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC;IAC/E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;CAClF,CAAC,CAAC","sourcesContent":["/**\n * Logger Type Definitions for SaaS Backend\n * Provides comprehensive logging interfaces and types\n */\n\nimport { LogLevel, RuntimeEnvironment } from '@wildo-ai/saas-models';\nimport { z } from 'zod';\n\n/** ──────────────────────────────────────────────────────────────\n * Interfaces (kept for non-schema types)\n * ────────────────────────────────────────────────────────────── */\n\nexport interface PerformanceTimer {\n  end(context?:  Record<string, unknown>): void;\n}\n\n/** ──────────────────────────────────────────────────────────────\n * Internal Schema with z.ZodObject type annotation\n * \n * ✅ Preserves all ZodObject methods (.extend, .partial, .omit, .pick, .shape)\n * ✅ Compatible with isolatedDeclarations: true (OXC)\n * ────────────────────────────────────────────────────────────── */\n\nconst FormatEnum = {\n  JSON: 'json',\n  PRETTY: 'pretty',\n  SIMPLE: 'simple'\n} as const;\n\nexport const LoggerConfigurationSchema = z.object({\n  level: z.enum(LogLevel).default(LogLevel.INFO),\n  environment: z.enum(RuntimeEnvironment).default(RuntimeEnvironment.DEVELOPMENT),\n  service: z.string().default('saas-backend'),\n  enableConsole: z.boolean().default(true),\n  enableFile: z.boolean().default(false),\n  enableDatabase: z.boolean().default(false),\n  format: z.enum(FormatEnum).default(FormatEnum.JSON),\n  metadata: z.record(z.string(), z.any()).default(() => ({})),\n  redactFields: z.array(z.string()).default(['password', 'secret', 'token', 'key'])\n});\n\n/** ──────────────────────────────────────────────────────────────\n * Inferred Type (from schema - no interface duplication)\n * ────────────────────────────────────────────────────────────── */\n\nexport type LoggerConfig = z.infer<typeof LoggerConfigurationSchema>;\n"]}
+{"version":3,"file":"logger.backend.schemas.js","sourceRoot":"","sources":["../../../../../../src/monitoring/logger/models/logger.backend.schemas.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB;;;;;oEAKoE;AAEpE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC9C,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC;IAC/E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC;IAC3C;;;;;;;OAOG;IACH,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;CAClF,CAAC,CAAC","sourcesContent":["/**\n * Logger Type Definitions for SaaS Backend\n * Provides comprehensive logging interfaces and types\n */\n\nimport { LogLevel, RuntimeEnvironment } from '@wildo-ai/saas-models';\nimport { z } from 'zod';\n\n/** ──────────────────────────────────────────────────────────────\n * Interfaces (kept for non-schema types)\n * ────────────────────────────────────────────────────────────── */\n\nexport interface PerformanceTimer {\n  end(context?:  Record<string, unknown>): void;\n}\n\n/** ──────────────────────────────────────────────────────────────\n * Internal Schema with z.ZodObject type annotation\n * \n * ✅ Preserves all ZodObject methods (.extend, .partial, .omit, .pick, .shape)\n * ✅ Compatible with isolatedDeclarations: true (OXC)\n * ────────────────────────────────────────────────────────────── */\n\n/**\n * EVERY member here is READ. That is the contract this schema lost and has regained.\n *\n * It used to declare five more — `enableConsole`, `enableFile`, `enableDatabase`,\n * `format` and `metadata` — that no code path could select. Each was removed for its\n * own reason, recorded so none is reintroduced as an obvious gap:\n *\n * - `enableFile` / `enableDatabase` are REDUNDANT, not missing. `otel-preload` fans\n *   every Pino record out to stdout AND an OTLP collector through the\n *   `instrumentation-pino` bridge whenever `OBSERVABILITY_TELEMETRY` is selected, and a\n *   container platform collects stdout regardless. A database sink would additionally\n *   put log writes on the very datastore whose failure you are diagnosing.\n * - `format` was a SECOND, dead authority for a decision made elsewhere: pretty-vs-JSON\n *   is `usePrettyConsole` in `logger.service.ts`, from `LOG_FORMATTED_CONSOLE_ERRORS`\n *   and the environment. Keeping it invited `format: 'pretty'` and no effect.\n * - `enableConsole` could not be honoured. The console is what `docker logs` reads and\n *   what the OTLP bridge WRAPS, so `false` would have to be refused rather than obeyed.\n * - `metadata` is superseded by pino's `base` (service, environment, hostname, pid) and\n *   by the `mixin` that stamps `correlationId` on every record inside a request.\n *\n * Decided on issue #437 after measuring what OpenTelemetry already carries.\n */\nexport const LoggerConfigurationSchema = z.object({\n  level: z.enum(LogLevel).default(LogLevel.INFO),\n  environment: z.enum(RuntimeEnvironment).default(RuntimeEnvironment.DEVELOPMENT),\n  service: z.string().default('saas-backend'),\n  /**\n   * Top-level context keys pino censors, handed straight to `redact.paths`.\n   *\n   * This default is LOAD-BEARING and was inert from 2026-02-23 to 2026-09-08 because\n   * `loadConfiguration` passed `redactFields: []` and a Zod default applies only to an\n   * UNDEFINED key. Never restate it at a construction site — omit the key instead.\n   * Pinned by `logger.service.redaction.test.ts`.\n   */\n  redactFields: z.array(z.string()).default(['password', 'secret', 'token', 'key'])\n});\n\n/** ──────────────────────────────────────────────────────────────\n * Inferred Type (from schema - no interface duplication)\n * ────────────────────────────────────────────────────────────── */\n\nexport type LoggerConfig = z.infer<typeof LoggerConfigurationSchema>;\n"]}

package/dist/esm/monitoring/logger/services/logger.service.d.ts

@@ -34,6 +34,18 @@ export declare class LoggerService {
      * Get type-based debug logger
      */
     debugByType(type: string): (message: string, context?: Record<string, unknown>) => void;
+    /**
+     * Emit at the requested level, or higher if the record carries a level floor.
+     *
+     * The three sub-`error` levels route through this so a best-effort catch cannot bury a server fault
+     * below what an operator alerts on. See `log-severity-floor.backend.utils.ts` for the measurement
+     * and for why the answer travels with the record instead of being re-decided at 213 call sites.
+     *
+     * When the floor raises the level, the record keeps what the call site ASKED for under
+     * `promotedFromLevel`, so the promotion is legible in the log rather than looking like the boundary
+     * chose `error` itself.
+     */
+    private emitAtLevelFloor;
     info(message: string, context?: Record<string, unknown>): void;
     warn(message: string, context?: Record<string, unknown>): void;
     error(message: string, errorOrContext?: Error | Record<string, unknown>, context?: Record<string, unknown>): void;

package/dist/esm/monitoring/logger/services/logger.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.service.d.ts","sourceRoot":"","sources":["../../../../../../src/monitoring/logger/services/logger.service.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAA6B,gBAAgB,EAAE,MAAM,oEAAoE,CAAC;AAC/I,OAAO,EAAE,gBAAgB,EAAE,MAAM,6DAA6D,CAAC;AAO/F,qBACa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,sBAAsB,CAAmC;IACjE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;;IAOjF,OAAO,CAAC,UAAU;IASX,YAAY,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAIxE;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,iBAAiB;IA+BzB;;OAEG;IACH,OAAO,CAAC,YAAY;IAmGpB,SAAS,IAAI,YAAY;IAKzB;;OAEG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAIzD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI;IASxF,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAK9D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAejH;;;;;;;OAOG;IACH,WAAW,CACT,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,OAAO,EACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI;IAUP;;OAEG;IACH,WAAW,CACT,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,OAAO,EACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI;IAUP,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI/D,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB;IAiBlF,OAAO,CAAC,aAAa;CAWtB"}
+{"version":3,"file":"logger.service.d.ts","sourceRoot":"","sources":["../../../../../../src/monitoring/logger/services/logger.service.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAA6B,gBAAgB,EAAE,MAAM,oEAAoE,CAAC;AAC/I,OAAO,EAAE,gBAAgB,EAAE,MAAM,6DAA6D,CAAC;AAW/F,qBACa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,sBAAsB,CAAmC;IACjE,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;;IAOjF,OAAO,CAAC,UAAU;IASX,YAAY,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAIxE;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,iBAAiB;IAyCzB;;OAEG;IACH,OAAO,CAAC,YAAY;IAmGpB,SAAS,IAAI,YAAY;IAKzB;;OAEG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAIzD;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI;IASxF;;;;;;;;;;OAUG;IACH,OAAO,CAAC,gBAAgB;IA2BxB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAK9D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAejH;;;;;;;OAOG;IACH,WAAW,CACT,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,OAAO,EACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI;IAUP;;OAEG;IACH,WAAW,CACT,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,OAAO,EACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI;IAUP,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI/D,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB;IAiBlF,OAAO,CAAC,aAAa;CAWtB"}

package/dist/esm/monitoring/logger/services/logger.service.js

@@ -13,6 +13,7 @@ import pretty from 'pino-pretty';
 import { LogLevel, RuntimeEnvironment } from '@wildo-ai/saas-models';
 import { LoggerConfigurationSchema } from '../../../monitoring/logger/models/logger.backend.schemas.js';
 import { projectCaughtErrorLogFields } from '../../../errors/utils/error-log-level-classification.backend.utils.js';
+import { LOG_SEVERITY_PROMOTED_FROM_FIELD, resolveEmittedLogLevel, } from '../../../monitoring/logger/utils/log-severity-floor.backend.utils.js';
 import { normalizeLogContext } from '../../../monitoring/logger/utils/log-value-normalization.backend.utils.js';
 import { getRequestContextFrame } from '../../../runtime/models/request-context.als.backend.js';
 let LoggerService = class LoggerService {
@@ -46,16 +47,26 @@ let LoggerService = class LoggerService {
      *    indicates someone bypassed the CLI sync path.
      */
     loadConfiguration(appConfig, appSlug) {
+        /*
+         * ONLY what this code DECIDES. Every other member is left to
+         * `LoggerConfigurationSchema`'s own default, deliberately — a second copy of a
+         * default is a second authority, and this object held one that CONTRADICTED the
+         * schema for seven months.
+         *
+         * `redactFields` was `[]` here while the schema declares
+         * `['password', 'secret', 'token', 'key']`. A Zod default applies only to an
+         * `undefined` key, so the empty array won, `pino`'s `redact.paths` was empty, and
+         * the framework's ONLY redaction control was inert at every call site — while
+         * those same records leave the process to a third-party collector through the
+         * OTLP log bridge whenever `OBSERVABILITY_TELEMETRY` is selected. Omitting the key
+         * is the whole fix; the schema already says what to censor.
+         *
+         * `level` stays explicit because it genuinely disagrees with the schema (DEBUG
+         * here, INFO there) and the disagreement is intended: a process with no
+         * `LOG_LEVEL` in its environment is a development process.
+         */
         const defaultConfig = {
             level: LogLevel.DEBUG,
-            environment: RuntimeEnvironment.DEVELOPMENT,
-            service: 'saas-backend',
-            enableConsole: true,
-            enableFile: false,
-            enableDatabase: false,
-            format: 'json',
-            metadata: {},
-            redactFields: []
         };
         const envLogLevel = process.env.LOG_LEVEL;
         if (envLogLevel && Object.values(LogLevel).includes(envLogLevel)) {
@@ -189,11 +200,41 @@ let LoggerService = class LoggerService {
             }
         };
     }
+    /**
+     * Emit at the requested level, or higher if the record carries a level floor.
+     *
+     * The three sub-`error` levels route through this so a best-effort catch cannot bury a server fault
+     * below what an operator alerts on. See `log-severity-floor.backend.utils.ts` for the measurement
+     * and for why the answer travels with the record instead of being re-decided at 213 call sites.
+     *
+     * When the floor raises the level, the record keeps what the call site ASKED for under
+     * `promotedFromLevel`, so the promotion is legible in the log rather than looking like the boundary
+     * chose `error` itself.
+     */
+    emitAtLevelFloor(requestedLevel, message, context) {
+        const emittedLevel = resolveEmittedLogLevel(requestedLevel, context);
+        const enriched = this.enrichContext(emittedLevel === requestedLevel
+            ? context
+            : { ...(context ?? {}), [LOG_SEVERITY_PROMOTED_FROM_FIELD]: requestedLevel });
+        switch (emittedLevel) {
+            case 'error':
+                this.logger.error(enriched, message);
+                return;
+            case 'warn':
+                this.logger.warn(enriched, message);
+                return;
+            case 'info':
+                this.logger.info(enriched, message);
+                return;
+            default:
+                this.logger.debug(enriched, message);
+        }
+    }
     info(message, context) {
-        this.logger.info(this.enrichContext(context), message);
+        this.emitAtLevelFloor('info', message, context);
     }
     warn(message, context) {
-        this.logger.warn(this.enrichContext(context), message);
+        this.emitAtLevelFloor('warn', message, context);
     }
     error(message, errorOrContext, context) {
         if (errorOrContext instanceof Error) {
@@ -229,7 +270,7 @@ let LoggerService = class LoggerService {
         }), message);
     }
     debug(message, context) {
-        this.logger.debug(this.enrichContext(context), message);
+        this.emitAtLevelFloor('debug', message, context);
     }
     trace(message, context) {
         this.logger.trace(this.enrichContext(context), message);

package/dist/esm/monitoring/logger/services/logger.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.service.js","sourceRoot":"","sources":["../../../../../../src/monitoring/logger/services/logger.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,IAA8B,MAAM,MAAM,CAAC;AAClD,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAErE,OAAO,EAAgB,yBAAyB,EAAoB,MAAM,oEAAoE,CAAC;AAE/I,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EAAE,mBAAmB,EAAE,MAAM,kFAAkF,CAAC;AACvH,OAAO,EAAE,sBAAsB,EAAE,MAAM,+DAA+D,CAAC;AAKhG,IAAM,aAAa,GAAnB,MAAM,aAAa;IAChB,MAAM,CAAa;IACnB,MAAM,CAAe;IACrB,sBAAsB,GAAyB,IAAI,GAAG,EAAE,CAAC;IACvD,QAAQ,CAA+D;IAEjF;QACE,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAGO,UAAU,CAAC,SAA4B,EAAE,OAAgB;QAC/D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAElC,8CAA8C;QAC9C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAClD,IAAI,CAAC,mBAAmB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAEM,YAAY,CAAC,SAA2B,EAAE,OAAgB;QAC/D,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;OAWG;IACK,iBAAiB,CAAC,SAA4B,EAAE,OAAgB;QAEtE,MAAM,aAAa,GAAiB;YAClC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAG,kBAAkB,CAAC,WAAW;YAC5C,OAAO,EAAE,cAAc;YACvB,aAAa,EAAE,IAAI;YACnB,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,KAAK;YACrB,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,EAAE;YACZ,YAAY,EAAE,EAAE;SACjB,CAAA;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC1C,IAAI,WAAW,IAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/E,aAAa,CAAC,KAAK,GAAG,WAAuB,CAAC;QAChD,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAI,OAAO,CAAC,GAAG,CAAC,eAAsC,IAAI,kBAAkB,CAAC,WAAW,CAAC;YACrG,aAAa,CAAC,WAAW,GAAG,MAAM,CAAC;YACnC,4GAA4G;YAC5G,gDAAgD;YAChD,MAAM,WAAW,GAAG,OAAO,IAAI,SAAS,CAAC,WAAW,CAAC,OAAO,IAAI,cAAc,CAAC;YAC/E,aAAa,CAAC,OAAO,GAAG,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC;QACrD,CAAC;QAED,OAAO,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,wDAAwD;QACxD,mFAAmF;QACnF,yFAAyF;QACzF,0EAA0E;QAC1E,yEAAyE;QACzE,4EAA4E;QAC5E,+EAA+E;QAC/E,yDAAyD;QACzD,6EAA6E;QAC7E,wBAAwB;QACxB,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClD,MAAM,UAAU,GAAQ;YACtB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,IAAI,EAAE;gBACJ,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC5B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBACpC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;YACD,MAAM,EAAE;gBACN,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBAC/B,MAAM,EAAE,YAAY;aACrB;YACD,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO;YACxC,UAAU,EAAE;gBACV,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBAC5C,QAAQ,EAAE,CAAC,QAAa,EAAE,EAAE,CAAC,CAAC;oBAC5B,GAAG,QAAQ;iBACZ,CAAC;aACH;YACD,iGAAiG;YACjG,+FAA+F;YAC/F,2FAA2F;YAC3F,yFAAyF;YACzF,kGAAkG;YAClG,sFAAsF;YACtF,KAAK,EAAE,GAAG,EAAE;gBACV,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,OAAO;oBACL,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxF,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChF,CAAC;YACJ,CAAC;SACF,CAAC;QAEF,qCAAqC;QACrC,EAAE;QACF,wDAAwD;QACxD,kEAAkE;QAClE,oEAAoE;QACpE,mEAAmE;QACnE,8DAA8D;QAC9D,gEAAgE;QAChE,MAAM,yBAAyB,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;QAC3E,MAAM,gBAAgB,GAAG,yBAAyB,KAAK,MAAM;YAC3D,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,yBAAyB,KAAK,OAAO;gBACrC,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,kBAAkB,CAAC,WAAW,CAAC;QAEjE,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,8EAA8E;gBAC9E,4DAA4D;gBAC5D,EAAE;gBACF,uEAAuE;gBACvE,kFAAkF;gBAClF,8EAA8E;gBAC9E,oFAAoF;gBACpF,iFAAiF;gBACjF,kFAAkF;gBAClF,qFAAqF;gBACrF,qFAAqF;gBACrF,yDAAyD;gBACzD,MAAM,YAAY,GAAG,MAAM,CAAC;oBAC1B,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI;oBAChB,aAAa,EAAE,qBAAqB;oBACpC,aAAa,EAAE,OAAO;oBACtB,uEAAuE;oBACvE,uEAAuE;oBACvE,gEAAgE;oBAChE,MAAM,EAAE,kCAAkC;iBAC3C,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iEAAiE;gBACjE,OAAO,CAAC,IAAI,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAGD;;OAEG;IACH,mBAAmB,CAAC,IAAY,EAAE,OAAgB;QAChD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAY;QACtB,OAAO,CAAC,OAAe,EAAE,OAAiC,EAAE,EAAE;YAC5D,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAA,eAAe;YACpE,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAGD,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAGD,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,cAAgD,EAAE,OAAiC;QACxG,IAAI,cAAc,YAAY,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,IAAI,CAAC,aAAa,CAAC;gBACjB,GAAG,2BAA2B,CAAC,cAAc,CAAC;gBAC9C,GAAG,OAAO;aACX,CAAC,EACF,OAAO,CACR,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CACT,OAAe,EACf,WAAoB,EACpB,OAAiC;QAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,IAAI,CAAC,aAAa,CAAC;YACjB,GAAG,2BAA2B,CAAC,WAAW,CAAC;YAC3C,GAAG,OAAO;SACX,CAAC,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CACT,OAAe,EACf,WAAoB,EACpB,OAAiC;QAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,IAAI,CAAC,aAAa,CAAC;YACjB,GAAG,2BAA2B,CAAC,WAAW,CAAC;YAC3C,GAAG,OAAO;SACX,CAAC,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,OAAiC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO;YACL,GAAG,EAAE,CAAC,UAAoC,EAAE,EAAE;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,gBAAgB,SAAS,EAAE,EAAE;oBACrC,GAAG,OAAO;oBACV,GAAG,UAAU;oBACb,SAAS;oBACT,QAAQ;oBACR,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,OAAiC;QACrD,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;CAIF,CAAA;AAxSY,aAAa;IADzB,UAAU,EAAE;;GACA,aAAa,CAwSzB","sourcesContent":["import { injectable } from 'inversify';\nimport pino, { Logger as PinoLogger } from 'pino';\nimport pretty from 'pino-pretty';\nimport { z } from 'zod';\nimport { LogLevel, RuntimeEnvironment } from '@wildo-ai/saas-models';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerConfig, LoggerConfigurationSchema, PerformanceTimer } from '~wildo-backend-lib/monitoring/logger/models/logger.backend.schemas';\nimport { AppConfiguration } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { normalizeLogContext } from '~wildo-backend-lib/monitoring/logger/utils/log-value-normalization.backend.utils';\nimport { getRequestContextFrame } from '~wildo-backend-lib/runtime/models/request-context.als.backend';\n\n\n\n@injectable()\nexport class LoggerService {\n  private logger: PinoLogger;\n  private config: LoggerConfig;\n  private activeDebugTypeLogging: Map<string, boolean> = new Map();\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor() {\n    this.initialize();\n  }\n\n\n  private initialize(appConfig?: AppConfiguration, appSlug?: string): void {\n    this.config = this.loadConfiguration(appConfig, appSlug);\n    this.logger = this.createLogger();\n\n    // Initialize logDebug after logger is created\n    this.logDebug = this.debugByType('LoggerService');\n    this.setDebugTypeLogging('LoggerService', false);\n  }\n\n  public reinitialize(appConfig: AppConfiguration, appSlug?: string): void {\n    this.initialize(appConfig, appSlug);\n  }\n\n  /**\n   * Load logger configuration from environment\n   *\n   * Slice 3.5 wiring:\n   *  - `process.env.LOG_LEVEL` (emitted by `env-vars-builder` from\n   *    `infra.logging.level`) overrides the built-in default. Validated\n   *    against `LogLevel` enum — invalid values are ignored (we keep\n   *    the default rather than crash, since logging misconfig must\n   *    never block process boot). Upstream `WildoLoggingConfigSchema`\n   *    is the strict validation surface, so a bad value reaching here\n   *    indicates someone bypassed the CLI sync path.\n   */\n  private loadConfiguration(appConfig?: AppConfiguration, appSlug?: string): LoggerConfig {\n\n    const defaultConfig: LoggerConfig = {\n      level: LogLevel.DEBUG,\n      environment:  RuntimeEnvironment.DEVELOPMENT,\n      service: 'saas-backend',\n      enableConsole: true,\n      enableFile: false,\n      enableDatabase: false,\n      format: 'json',\n      metadata: {},\n      redactFields: []\n    }\n\n    const envLogLevel = process.env.LOG_LEVEL;\n    if (envLogLevel && (Object.values(LogLevel) as string[]).includes(envLogLevel)) {\n      defaultConfig.level = envLogLevel as LogLevel;\n    }\n\n    if (appConfig) {\n      const appEnv = (process.env.APPLICATION_ENV as RuntimeEnvironment) || RuntimeEnvironment.DEVELOPMENT;\n      defaultConfig.environment = appEnv;\n      // Use appSlug (technical identifier) with appEnv for service name, e.g., \"wildo-ai-application:development\"\n      // Falls back to appName if appSlug not provided\n      const serviceName = appSlug || appConfig.appIdentity.appName || 'saas-backend';\n      defaultConfig.service = `${serviceName}:${appEnv}`;\n    }\n\n    return LoggerConfigurationSchema.parse(defaultConfig);\n  }\n\n  /**\n   * Create Pino logger instance with proper configuration\n   */\n  private createLogger(): PinoLogger {\n    // Instance/deployment identity carried on every record.\n    // assurance-control: WILDO.AUDIT.CONTEXT_ATTRIBUTION — `service` (`appSlug:env`) +\n    // `environment` are the audit-relevant WHAT/WHERE: which application, which environment.\n    // - `hostname` is emitted ONLY when it is a real deployment identity — in\n    //   orchestrated envs `HOSTNAME` is the pod/container name (valuable for\n    //   forensics). In local dev it is unset, so the key is OMITTED rather than\n    //   emitting a placeholder or the developer's machine name: absence is cleaner\n    //   than a phantom `'unknown'` bucket in the aggregator.\n    // - `pid` is a cheap debugging aid (distinguishes local multi-process runs);\n    //   compliance-neutral.\n    const orchestratedHostname = process.env.HOSTNAME;\n    const baseConfig: any = {\n      level: this.config.level,\n      base: {\n        pid: process.pid,\n        service: this.config.service,\n        environment: this.config.environment,\n        ...(orchestratedHostname ? { hostname: orchestratedHostname } : {}),\n      },\n      redact: {\n        paths: this.config.redactFields,\n        censor: '[REDACTED]'\n      },\n      timestamp: pino.stdTimeFunctions.isoTime,\n      formatters: {\n        level: (label: string) => ({ level: label }),\n        bindings: (bindings: any) => ({\n          ...bindings\n        })\n      },\n      // Phase 1 — surface the request-correlation backbone on EVERY log line. Read the request-context\n      // ALS at log time (not construction): inside a request seam this stamps `correlationId` (+ the\n      // frontend origin) so all logs for one request are filterable by one id; outside a request\n      // (startup, internal ops) the frame is absent and nothing is added. Complements the OTel\n      // trace_id/span_id that the instrumentation-pino bridge adds when telemetry is live — that bridge\n      // PATCHES pino rather than using this single `mixin` slot, so the two do not collide.\n      mixin: () => {\n        const frame = getRequestContextFrame();\n        if (!frame) {\n          return {};\n        }\n        return {\n          correlationId: frame.correlationId,\n          ...(frame.frontendServiceName ? { frontendServiceName: frame.frontendServiceName } : {}),\n          ...(frame.clientInstanceId ? { clientInstanceId: frame.clientInstanceId } : {}),\n        };\n      }\n    };\n\n    // Development-specific configuration\n    //\n    // Slice 3.5: `LOG_FORMATTED_CONSOLE_ERRORS` (emitted by\n    // `env-vars-builder` from `infra.logging.formattedConsoleErrors`)\n    // overrides the auto-detected pino-pretty branch. Explicit `'true'`\n    // forces pino-pretty regardless of environment; explicit `'false'`\n    // disables it even in development. Unset preserves the legacy\n    // auto-detect behavior so existing dev workflows are unchanged.\n    const envFormattedConsoleErrors = process.env.LOG_FORMATTED_CONSOLE_ERRORS;\n    const usePrettyConsole = envFormattedConsoleErrors === 'true'\n      ? true\n      : envFormattedConsoleErrors === 'false'\n        ? false\n        : this.config.environment === RuntimeEnvironment.DEVELOPMENT;\n\n    if (usePrettyConsole) {\n      try {\n        // pino-pretty as a MAIN-THREAD destination stream — deliberately NOT a worker\n        // `transport: { target: 'pino-pretty' }` (Slice 2 Phase 5).\n        //\n        // The OTLP log bridge (`@opentelemetry/instrumentation-pino`, wired in\n        // `otel-preload`) sends each record to OTel by replacing the logger's `streamSym`\n        // with `pino.multistream([originalStream, otelStream])`. A worker `transport`\n        // makes `streamSym` a thread-stream whose writes BYPASS that post-hoc wrap, so logs\n        // never reach the collector (verified: 0 log records). A main-thread destination\n        // stream is exactly what the bridge wraps, so dev logs now fan out to BOTH stdout\n        // (pretty) AND the OTLP exporter. The only cost is main-thread prettification, which\n        // is acceptable for development. Production (`usePrettyConsole === false`) keeps the\n        // default stdout stream, which the bridge already wraps.\n        const prettyStream = pretty({\n          colorize: true,\n          levelFirst: true,\n          translateTime: 'yyyy-mm-dd HH:MM:ss',\n          messageFormat: '{msg}',\n          // Hide the machine/identity fields from the human dev console (the dev\n          // orchestrator already prefixes each line with the process name). They\n          // are still emitted on the JSON stream that prod/SIEM consumes.\n          ignore: 'pid,hostname,service,environment',\n        });\n        return pino(baseConfig, prettyStream);\n      } catch (error) {\n        // Fallback to basic JSON output if pino-pretty is not available.\n        console.warn('⚠️  pino-pretty not available, using JSON output:', error);\n      }\n    }\n\n    return pino(baseConfig);\n  }\n\n  getConfig(): LoggerConfig {\n    return this.config;\n  }\n\n\n  /**\n   * Enable/disable type-based debug logging\n   */\n  setDebugTypeLogging(type: string, enabled: boolean): void {\n    this.activeDebugTypeLogging.set(type, enabled);\n  }\n\n  /**\n   * Get type-based debug logger\n   */\n  debugByType(type: string): (message: string, context?:  Record<string, unknown>) => void {\n    return (message: string, context?: Record<string, unknown>) => {\n      if (this.activeDebugTypeLogging.get(type)) {\n        this.debug(`[${type}] ${message}`, { ...context });//logType: type\n      }\n    };\n  }\n\n\n  info(message: string, context?: Record<string, unknown>): void {\n    this.logger.info(this.enrichContext(context), message);\n  }\n\n\n  warn(message: string, context?: Record<string, unknown>): void {\n    this.logger.warn(this.enrichContext(context), message);\n  }\n\n  error(message: string, errorOrContext?: Error | Record<string, unknown>, context?: Record<string, unknown>): void {\n    if (errorOrContext instanceof Error) {\n      this.logger.error(\n        this.enrichContext({\n          ...projectCaughtErrorLogFields(errorOrContext),\n          ...context,\n        }),\n        message,\n      );\n      return;\n    }\n\n    this.logger.error(this.enrichContext(errorOrContext), message);\n  }\n\n  /**\n   * Emit a caught `unknown` value at an error-handling boundary.\n   *\n   * Unlike {@link error}, the second argument is never guessed to be a context\n   * record. A thrown plain object (including `WildoError_Backend`) is projected\n   * as the failure itself, which prevents both `[object Object]` coercion and\n   * pre-stringified/doubly-escaped JSON.\n   */\n  caughtError(\n    message: string,\n    caughtValue: unknown,\n    context?: Record<string, unknown>,\n  ): void {\n    this.logger.error(\n      this.enrichContext({\n        ...projectCaughtErrorLogFields(caughtValue),\n        ...context,\n      }),\n      message,\n    );\n  }\n\n  /**\n   * Fatal counterpart of {@link caughtError} for uncaught process failures.\n   */\n  caughtFatal(\n    message: string,\n    caughtValue: unknown,\n    context?: Record<string, unknown>,\n  ): void {\n    this.logger.fatal(\n      this.enrichContext({\n        ...projectCaughtErrorLogFields(caughtValue),\n        ...context,\n      }),\n      message,\n    );\n  }\n\n  debug(message: string, context?: Record<string, unknown>): void {\n    this.logger.debug(this.enrichContext(context), message);\n  }\n\n  trace(message: string, context?: Record<string, unknown>): void {\n    this.logger.trace(this.enrichContext(context), message);\n  }\n\n  fatal(message: string, context?: Record<string, unknown>): void {\n    this.logger.fatal(this.enrichContext(context), message);\n  }\n\n  startTimer(operation: string, context?: Record<string, unknown>): PerformanceTimer {\n    const startTime = Date.now();\n\n    return {\n      end: (endContext?: Record<string, unknown>) => {\n        const duration = Date.now() - startTime;\n        this.info(`Performance: ${operation}`, {\n          ...context,\n          ...endContext,\n          operation,\n          duration,\n          performance: true\n        });\n      }\n    };\n  }\n\n  private enrichContext(context?: Record<string, unknown>): Record<string, unknown> {\n    // NOTE: do NOT add a `timestamp` here. Pino already emits the standard `time`\n    // field (configured via `timestamp: pino.stdTimeFunctions.isoTime`); a second\n    // `timestamp` key was pure duplication on every line. Normalization returns\n    // a fresh JSON-native graph, so the caller's context is never mutated and\n    // nested Error/cyclic/object values cannot fall through Pino serialization.\n    return normalizeLogContext(context);\n  }\n\n\n\n}\n"]}
+{"version":3,"file":"logger.service.js","sourceRoot":"","sources":["../../../../../../src/monitoring/logger/services/logger.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,IAA8B,MAAM,MAAM,CAAC;AAClD,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAErE,OAAO,EAAgB,yBAAyB,EAAoB,MAAM,oEAAoE,CAAC;AAE/I,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAC3H,OAAO,EACL,gCAAgC,EAChC,sBAAsB,GACvB,MAAM,6EAA6E,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kFAAkF,CAAC;AACvH,OAAO,EAAE,sBAAsB,EAAE,MAAM,+DAA+D,CAAC;AAKhG,IAAM,aAAa,GAAnB,MAAM,aAAa;IAChB,MAAM,CAAa;IACnB,MAAM,CAAe;IACrB,sBAAsB,GAAyB,IAAI,GAAG,EAAE,CAAC;IACvD,QAAQ,CAA+D;IAEjF;QACE,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAGO,UAAU,CAAC,SAA4B,EAAE,OAAgB;QAC/D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAElC,8CAA8C;QAC9C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAClD,IAAI,CAAC,mBAAmB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAEM,YAAY,CAAC,SAA2B,EAAE,OAAgB;QAC/D,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;OAWG;IACK,iBAAiB,CAAC,SAA4B,EAAE,OAAgB;QAEtE;;;;;;;;;;;;;;;;;WAiBG;QACH,MAAM,aAAa,GAA8C;YAC/D,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC;QAEF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC1C,IAAI,WAAW,IAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/E,aAAa,CAAC,KAAK,GAAG,WAAuB,CAAC;QAChD,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAI,OAAO,CAAC,GAAG,CAAC,eAAsC,IAAI,kBAAkB,CAAC,WAAW,CAAC;YACrG,aAAa,CAAC,WAAW,GAAG,MAAM,CAAC;YACnC,4GAA4G;YAC5G,gDAAgD;YAChD,MAAM,WAAW,GAAG,OAAO,IAAI,SAAS,CAAC,WAAW,CAAC,OAAO,IAAI,cAAc,CAAC;YAC/E,aAAa,CAAC,OAAO,GAAG,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC;QACrD,CAAC;QAED,OAAO,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,wDAAwD;QACxD,mFAAmF;QACnF,yFAAyF;QACzF,0EAA0E;QAC1E,yEAAyE;QACzE,4EAA4E;QAC5E,+EAA+E;QAC/E,yDAAyD;QACzD,6EAA6E;QAC7E,wBAAwB;QACxB,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClD,MAAM,UAAU,GAAQ;YACtB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,IAAI,EAAE;gBACJ,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC5B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBACpC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;YACD,MAAM,EAAE;gBACN,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBAC/B,MAAM,EAAE,YAAY;aACrB;YACD,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO;YACxC,UAAU,EAAE;gBACV,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBAC5C,QAAQ,EAAE,CAAC,QAAa,EAAE,EAAE,CAAC,CAAC;oBAC5B,GAAG,QAAQ;iBACZ,CAAC;aACH;YACD,iGAAiG;YACjG,+FAA+F;YAC/F,2FAA2F;YAC3F,yFAAyF;YACzF,kGAAkG;YAClG,sFAAsF;YACtF,KAAK,EAAE,GAAG,EAAE;gBACV,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,OAAO;oBACL,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxF,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChF,CAAC;YACJ,CAAC;SACF,CAAC;QAEF,qCAAqC;QACrC,EAAE;QACF,wDAAwD;QACxD,kEAAkE;QAClE,oEAAoE;QACpE,mEAAmE;QACnE,8DAA8D;QAC9D,gEAAgE;QAChE,MAAM,yBAAyB,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;QAC3E,MAAM,gBAAgB,GAAG,yBAAyB,KAAK,MAAM;YAC3D,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,yBAAyB,KAAK,OAAO;gBACrC,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,kBAAkB,CAAC,WAAW,CAAC;QAEjE,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,8EAA8E;gBAC9E,4DAA4D;gBAC5D,EAAE;gBACF,uEAAuE;gBACvE,kFAAkF;gBAClF,8EAA8E;gBAC9E,oFAAoF;gBACpF,iFAAiF;gBACjF,kFAAkF;gBAClF,qFAAqF;gBACrF,qFAAqF;gBACrF,yDAAyD;gBACzD,MAAM,YAAY,GAAG,MAAM,CAAC;oBAC1B,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI;oBAChB,aAAa,EAAE,qBAAqB;oBACpC,aAAa,EAAE,OAAO;oBACtB,uEAAuE;oBACvE,uEAAuE;oBACvE,gEAAgE;oBAChE,MAAM,EAAE,kCAAkC;iBAC3C,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iEAAiE;gBACjE,OAAO,CAAC,IAAI,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAGD;;OAEG;IACH,mBAAmB,CAAC,IAAY,EAAE,OAAgB;QAChD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAY;QACtB,OAAO,CAAC,OAAe,EAAE,OAAiC,EAAE,EAAE;YAC5D,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAA,eAAe;YACpE,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAGD;;;;;;;;;;OAUG;IACK,gBAAgB,CACtB,cAAyC,EACzC,OAAe,EACf,OAAiC;QAEjC,MAAM,YAAY,GAAG,sBAAsB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CACjC,YAAY,KAAK,cAAc;YAC7B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,gCAAgC,CAAC,EAAE,cAAc,EAAE,CAC/E,CAAC;QAEF,QAAQ,YAAY,EAAE,CAAC;YACrB,KAAK,OAAO;gBACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACrC,OAAO;YACT,KAAK,MAAM;gBACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACpC,OAAO;YACT,KAAK,MAAM;gBACT,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACpC,OAAO;YACT;gBACE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAGD,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,cAAgD,EAAE,OAAiC;QACxG,IAAI,cAAc,YAAY,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,IAAI,CAAC,aAAa,CAAC;gBACjB,GAAG,2BAA2B,CAAC,cAAc,CAAC;gBAC9C,GAAG,OAAO;aACX,CAAC,EACF,OAAO,CACR,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CACT,OAAe,EACf,WAAoB,EACpB,OAAiC;QAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,IAAI,CAAC,aAAa,CAAC;YACjB,GAAG,2BAA2B,CAAC,WAAW,CAAC;YAC3C,GAAG,OAAO;SACX,CAAC,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CACT,OAAe,EACf,WAAoB,EACpB,OAAiC;QAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,IAAI,CAAC,aAAa,CAAC;YACjB,GAAG,2BAA2B,CAAC,WAAW,CAAC;YAC3C,GAAG,OAAO;SACX,CAAC,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,OAAiC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO;YACL,GAAG,EAAE,CAAC,UAAoC,EAAE,EAAE;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,gBAAgB,SAAS,EAAE,EAAE;oBACrC,GAAG,OAAO;oBACV,GAAG,UAAU;oBACb,SAAS;oBACT,QAAQ;oBACR,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,OAAiC;QACrD,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;CAIF,CAAA;AAxVY,aAAa;IADzB,UAAU,EAAE;;GACA,aAAa,CAwVzB","sourcesContent":["import { injectable } from 'inversify';\nimport pino, { Logger as PinoLogger } from 'pino';\nimport pretty from 'pino-pretty';\nimport { z } from 'zod';\nimport { LogLevel, RuntimeEnvironment } from '@wildo-ai/saas-models';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerConfig, LoggerConfigurationSchema, PerformanceTimer } from '~wildo-backend-lib/monitoring/logger/models/logger.backend.schemas';\nimport { AppConfiguration } from '~wildo-backend-lib/config/models/app-config.backend.schemas';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport {\n  LOG_SEVERITY_PROMOTED_FROM_FIELD,\n  resolveEmittedLogLevel,\n} from '~wildo-backend-lib/monitoring/logger/utils/log-severity-floor.backend.utils';\nimport { normalizeLogContext } from '~wildo-backend-lib/monitoring/logger/utils/log-value-normalization.backend.utils';\nimport { getRequestContextFrame } from '~wildo-backend-lib/runtime/models/request-context.als.backend';\n\n\n\n@injectable()\nexport class LoggerService {\n  private logger: PinoLogger;\n  private config: LoggerConfig;\n  private activeDebugTypeLogging: Map<string, boolean> = new Map();\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor() {\n    this.initialize();\n  }\n\n\n  private initialize(appConfig?: AppConfiguration, appSlug?: string): void {\n    this.config = this.loadConfiguration(appConfig, appSlug);\n    this.logger = this.createLogger();\n\n    // Initialize logDebug after logger is created\n    this.logDebug = this.debugByType('LoggerService');\n    this.setDebugTypeLogging('LoggerService', false);\n  }\n\n  public reinitialize(appConfig: AppConfiguration, appSlug?: string): void {\n    this.initialize(appConfig, appSlug);\n  }\n\n  /**\n   * Load logger configuration from environment\n   *\n   * Slice 3.5 wiring:\n   *  - `process.env.LOG_LEVEL` (emitted by `env-vars-builder` from\n   *    `infra.logging.level`) overrides the built-in default. Validated\n   *    against `LogLevel` enum — invalid values are ignored (we keep\n   *    the default rather than crash, since logging misconfig must\n   *    never block process boot). Upstream `WildoLoggingConfigSchema`\n   *    is the strict validation surface, so a bad value reaching here\n   *    indicates someone bypassed the CLI sync path.\n   */\n  private loadConfiguration(appConfig?: AppConfiguration, appSlug?: string): LoggerConfig {\n\n    /*\n     * ONLY what this code DECIDES. Every other member is left to\n     * `LoggerConfigurationSchema`'s own default, deliberately — a second copy of a\n     * default is a second authority, and this object held one that CONTRADICTED the\n     * schema for seven months.\n     *\n     * `redactFields` was `[]` here while the schema declares\n     * `['password', 'secret', 'token', 'key']`. A Zod default applies only to an\n     * `undefined` key, so the empty array won, `pino`'s `redact.paths` was empty, and\n     * the framework's ONLY redaction control was inert at every call site — while\n     * those same records leave the process to a third-party collector through the\n     * OTLP log bridge whenever `OBSERVABILITY_TELEMETRY` is selected. Omitting the key\n     * is the whole fix; the schema already says what to censor.\n     *\n     * `level` stays explicit because it genuinely disagrees with the schema (DEBUG\n     * here, INFO there) and the disagreement is intended: a process with no\n     * `LOG_LEVEL` in its environment is a development process.\n     */\n    const defaultConfig: z.input<typeof LoggerConfigurationSchema> = {\n      level: LogLevel.DEBUG,\n    };\n\n    const envLogLevel = process.env.LOG_LEVEL;\n    if (envLogLevel && (Object.values(LogLevel) as string[]).includes(envLogLevel)) {\n      defaultConfig.level = envLogLevel as LogLevel;\n    }\n\n    if (appConfig) {\n      const appEnv = (process.env.APPLICATION_ENV as RuntimeEnvironment) || RuntimeEnvironment.DEVELOPMENT;\n      defaultConfig.environment = appEnv;\n      // Use appSlug (technical identifier) with appEnv for service name, e.g., \"wildo-ai-application:development\"\n      // Falls back to appName if appSlug not provided\n      const serviceName = appSlug || appConfig.appIdentity.appName || 'saas-backend';\n      defaultConfig.service = `${serviceName}:${appEnv}`;\n    }\n\n    return LoggerConfigurationSchema.parse(defaultConfig);\n  }\n\n  /**\n   * Create Pino logger instance with proper configuration\n   */\n  private createLogger(): PinoLogger {\n    // Instance/deployment identity carried on every record.\n    // assurance-control: WILDO.AUDIT.CONTEXT_ATTRIBUTION — `service` (`appSlug:env`) +\n    // `environment` are the audit-relevant WHAT/WHERE: which application, which environment.\n    // - `hostname` is emitted ONLY when it is a real deployment identity — in\n    //   orchestrated envs `HOSTNAME` is the pod/container name (valuable for\n    //   forensics). In local dev it is unset, so the key is OMITTED rather than\n    //   emitting a placeholder or the developer's machine name: absence is cleaner\n    //   than a phantom `'unknown'` bucket in the aggregator.\n    // - `pid` is a cheap debugging aid (distinguishes local multi-process runs);\n    //   compliance-neutral.\n    const orchestratedHostname = process.env.HOSTNAME;\n    const baseConfig: any = {\n      level: this.config.level,\n      base: {\n        pid: process.pid,\n        service: this.config.service,\n        environment: this.config.environment,\n        ...(orchestratedHostname ? { hostname: orchestratedHostname } : {}),\n      },\n      redact: {\n        paths: this.config.redactFields,\n        censor: '[REDACTED]'\n      },\n      timestamp: pino.stdTimeFunctions.isoTime,\n      formatters: {\n        level: (label: string) => ({ level: label }),\n        bindings: (bindings: any) => ({\n          ...bindings\n        })\n      },\n      // Phase 1 — surface the request-correlation backbone on EVERY log line. Read the request-context\n      // ALS at log time (not construction): inside a request seam this stamps `correlationId` (+ the\n      // frontend origin) so all logs for one request are filterable by one id; outside a request\n      // (startup, internal ops) the frame is absent and nothing is added. Complements the OTel\n      // trace_id/span_id that the instrumentation-pino bridge adds when telemetry is live — that bridge\n      // PATCHES pino rather than using this single `mixin` slot, so the two do not collide.\n      mixin: () => {\n        const frame = getRequestContextFrame();\n        if (!frame) {\n          return {};\n        }\n        return {\n          correlationId: frame.correlationId,\n          ...(frame.frontendServiceName ? { frontendServiceName: frame.frontendServiceName } : {}),\n          ...(frame.clientInstanceId ? { clientInstanceId: frame.clientInstanceId } : {}),\n        };\n      }\n    };\n\n    // Development-specific configuration\n    //\n    // Slice 3.5: `LOG_FORMATTED_CONSOLE_ERRORS` (emitted by\n    // `env-vars-builder` from `infra.logging.formattedConsoleErrors`)\n    // overrides the auto-detected pino-pretty branch. Explicit `'true'`\n    // forces pino-pretty regardless of environment; explicit `'false'`\n    // disables it even in development. Unset preserves the legacy\n    // auto-detect behavior so existing dev workflows are unchanged.\n    const envFormattedConsoleErrors = process.env.LOG_FORMATTED_CONSOLE_ERRORS;\n    const usePrettyConsole = envFormattedConsoleErrors === 'true'\n      ? true\n      : envFormattedConsoleErrors === 'false'\n        ? false\n        : this.config.environment === RuntimeEnvironment.DEVELOPMENT;\n\n    if (usePrettyConsole) {\n      try {\n        // pino-pretty as a MAIN-THREAD destination stream — deliberately NOT a worker\n        // `transport: { target: 'pino-pretty' }` (Slice 2 Phase 5).\n        //\n        // The OTLP log bridge (`@opentelemetry/instrumentation-pino`, wired in\n        // `otel-preload`) sends each record to OTel by replacing the logger's `streamSym`\n        // with `pino.multistream([originalStream, otelStream])`. A worker `transport`\n        // makes `streamSym` a thread-stream whose writes BYPASS that post-hoc wrap, so logs\n        // never reach the collector (verified: 0 log records). A main-thread destination\n        // stream is exactly what the bridge wraps, so dev logs now fan out to BOTH stdout\n        // (pretty) AND the OTLP exporter. The only cost is main-thread prettification, which\n        // is acceptable for development. Production (`usePrettyConsole === false`) keeps the\n        // default stdout stream, which the bridge already wraps.\n        const prettyStream = pretty({\n          colorize: true,\n          levelFirst: true,\n          translateTime: 'yyyy-mm-dd HH:MM:ss',\n          messageFormat: '{msg}',\n          // Hide the machine/identity fields from the human dev console (the dev\n          // orchestrator already prefixes each line with the process name). They\n          // are still emitted on the JSON stream that prod/SIEM consumes.\n          ignore: 'pid,hostname,service,environment',\n        });\n        return pino(baseConfig, prettyStream);\n      } catch (error) {\n        // Fallback to basic JSON output if pino-pretty is not available.\n        console.warn('⚠️  pino-pretty not available, using JSON output:', error);\n      }\n    }\n\n    return pino(baseConfig);\n  }\n\n  getConfig(): LoggerConfig {\n    return this.config;\n  }\n\n\n  /**\n   * Enable/disable type-based debug logging\n   */\n  setDebugTypeLogging(type: string, enabled: boolean): void {\n    this.activeDebugTypeLogging.set(type, enabled);\n  }\n\n  /**\n   * Get type-based debug logger\n   */\n  debugByType(type: string): (message: string, context?:  Record<string, unknown>) => void {\n    return (message: string, context?: Record<string, unknown>) => {\n      if (this.activeDebugTypeLogging.get(type)) {\n        this.debug(`[${type}] ${message}`, { ...context });//logType: type\n      }\n    };\n  }\n\n\n  /**\n   * Emit at the requested level, or higher if the record carries a level floor.\n   *\n   * The three sub-`error` levels route through this so a best-effort catch cannot bury a server fault\n   * below what an operator alerts on. See `log-severity-floor.backend.utils.ts` for the measurement\n   * and for why the answer travels with the record instead of being re-decided at 213 call sites.\n   *\n   * When the floor raises the level, the record keeps what the call site ASKED for under\n   * `promotedFromLevel`, so the promotion is legible in the log rather than looking like the boundary\n   * chose `error` itself.\n   */\n  private emitAtLevelFloor(\n    requestedLevel: 'debug' | 'info' | 'warn',\n    message: string,\n    context?: Record<string, unknown>,\n  ): void {\n    const emittedLevel = resolveEmittedLogLevel(requestedLevel, context);\n    const enriched = this.enrichContext(\n      emittedLevel === requestedLevel\n        ? context\n        : { ...(context ?? {}), [LOG_SEVERITY_PROMOTED_FROM_FIELD]: requestedLevel },\n    );\n\n    switch (emittedLevel) {\n      case 'error':\n        this.logger.error(enriched, message);\n        return;\n      case 'warn':\n        this.logger.warn(enriched, message);\n        return;\n      case 'info':\n        this.logger.info(enriched, message);\n        return;\n      default:\n        this.logger.debug(enriched, message);\n    }\n  }\n\n  info(message: string, context?: Record<string, unknown>): void {\n    this.emitAtLevelFloor('info', message, context);\n  }\n\n\n  warn(message: string, context?: Record<string, unknown>): void {\n    this.emitAtLevelFloor('warn', message, context);\n  }\n\n  error(message: string, errorOrContext?: Error | Record<string, unknown>, context?: Record<string, unknown>): void {\n    if (errorOrContext instanceof Error) {\n      this.logger.error(\n        this.enrichContext({\n          ...projectCaughtErrorLogFields(errorOrContext),\n          ...context,\n        }),\n        message,\n      );\n      return;\n    }\n\n    this.logger.error(this.enrichContext(errorOrContext), message);\n  }\n\n  /**\n   * Emit a caught `unknown` value at an error-handling boundary.\n   *\n   * Unlike {@link error}, the second argument is never guessed to be a context\n   * record. A thrown plain object (including `WildoError_Backend`) is projected\n   * as the failure itself, which prevents both `[object Object]` coercion and\n   * pre-stringified/doubly-escaped JSON.\n   */\n  caughtError(\n    message: string,\n    caughtValue: unknown,\n    context?: Record<string, unknown>,\n  ): void {\n    this.logger.error(\n      this.enrichContext({\n        ...projectCaughtErrorLogFields(caughtValue),\n        ...context,\n      }),\n      message,\n    );\n  }\n\n  /**\n   * Fatal counterpart of {@link caughtError} for uncaught process failures.\n   */\n  caughtFatal(\n    message: string,\n    caughtValue: unknown,\n    context?: Record<string, unknown>,\n  ): void {\n    this.logger.fatal(\n      this.enrichContext({\n        ...projectCaughtErrorLogFields(caughtValue),\n        ...context,\n      }),\n      message,\n    );\n  }\n\n  debug(message: string, context?: Record<string, unknown>): void {\n    this.emitAtLevelFloor('debug', message, context);\n  }\n\n  trace(message: string, context?: Record<string, unknown>): void {\n    this.logger.trace(this.enrichContext(context), message);\n  }\n\n  fatal(message: string, context?: Record<string, unknown>): void {\n    this.logger.fatal(this.enrichContext(context), message);\n  }\n\n  startTimer(operation: string, context?: Record<string, unknown>): PerformanceTimer {\n    const startTime = Date.now();\n\n    return {\n      end: (endContext?: Record<string, unknown>) => {\n        const duration = Date.now() - startTime;\n        this.info(`Performance: ${operation}`, {\n          ...context,\n          ...endContext,\n          operation,\n          duration,\n          performance: true\n        });\n      }\n    };\n  }\n\n  private enrichContext(context?: Record<string, unknown>): Record<string, unknown> {\n    // NOTE: do NOT add a `timestamp` here. Pino already emits the standard `time`\n    // field (configured via `timestamp: pino.stdTimeFunctions.isoTime`); a second\n    // `timestamp` key was pure duplication on every line. Normalization returns\n    // a fresh JSON-native graph, so the caller's context is never mutated and\n    // nested Error/cyclic/object values cannot fall through Pino serialization.\n    return normalizeLogContext(context);\n  }\n\n\n\n}\n"]}

package/dist/esm/monitoring/logger/utils/log-severity-floor.backend.utils.d.ts

@@ -0,0 +1,62 @@
+/**
+ * A LOG-LEVEL FLOOR a structured record can carry, so a boundary that hardcodes its level cannot
+ * bury a fault below the level an operator alerts on.
+ *
+ * ## The defect this exists to close
+ *
+ * `classifyBackendErrorLogSeverity` already answers "does a human need to look at this?" from the
+ * error's own declared contract, and `logWildoBackendErrorAtClassifiedSeverity` emits at that answer.
+ * A **best-effort catch** does not go through either: it writes `logger.warn(msg, { ...ctx,
+ * ...projectCaughtErrorLogFields(error) })`, choosing the level by hand at the call site.
+ *
+ * Measured 2026-09-09: **213 such emissions below `error`, across 86 files**, and the six error types
+ * whose declared severity is CRITICAL (INTERNAL, DATABASE, EXTERNAL_SERVICE, UNCAUGHT_EXCEPTION,
+ * UNHANDLED_REJECTION, INFRASTRUCTURE) are all reachable through any of them. So a swallowed database
+ * failure was emitted at `warn` while the projected fields still said `severity: CRITICAL` — visible
+ * to a reader who greps the field, invisible to a production alert keyed on level, which is what an
+ * operator keys on by default.
+ *
+ * ## Why a floor rather than 213 corrected call sites
+ *
+ * Most of those `warn`s are RIGHT — an expected self-healing condition, a 4xx the caller got wrong —
+ * so a sweep would have to re-judge each one and would rot the next time a boundary is added. The
+ * floor is total over the population instead: every one of those sites already calls the same
+ * projection, so the answer travels with the record and one rule at the sink applies it.
+ *
+ * ## It adds no new judgement, and it can only RAISE
+ *
+ * The floor IS `classifyBackendErrorLogSeverity`'s answer, so every "stays at warn" decision that
+ * function documents is preserved untouched — an expired token still floors at `debug`, a MEDIUM 4xx
+ * at `warn`. And promotion never lowers a level, so a boundary that deliberately logs ABOVE the
+ * classification (a permanently dead-lettered job is operationally an `error` whatever the underlying
+ * business severity) keeps its own louder choice.
+ *
+ * The vocabulary lives HERE, in the logger's own utils, rather than beside the classifier: the
+ * classifier writes the field and the logger reads it, so putting it in the logger's directory keeps
+ * the dependency pointing one way (errors → monitoring) instead of making the two import each other.
+ */
+/**
+ * The context key carrying the floor. Named rather than inlined at the two ends, because a writer and
+ * a reader agreeing on a string literal by coincidence is exactly how this mechanism goes silently
+ * inert.
+ */
+export declare const LOG_SEVERITY_FLOOR_FIELD = "logSeverityFloor";
+/** The context key recording what the call site ASKED for, whenever the floor raised it. */
+export declare const LOG_SEVERITY_PROMOTED_FROM_FIELD = "promotedFromLevel";
+/**
+ * The floor a record carries, or `undefined` when it carries none or carries an unrecognised value.
+ *
+ * Unrecognised is deliberately the same answer as absent: this reads a value that arrives through an
+ * untyped `Record<string, unknown>` context, and inventing a rank for a string nobody declared would
+ * promote records on a typo.
+ */
+export declare function resolveLogSeverityFloor(context: Record<string, unknown> | undefined): string | undefined;
+/**
+ * The level a record should actually be emitted at: the requested level, unless the record carries a
+ * floor above it.
+ *
+ * Returns the requested level unchanged whenever there is no floor, the floor is unrecognised, or the
+ * requested level is already at or above it — so the common path is untouched.
+ */
+export declare function resolveEmittedLogLevel(requestedLevel: string, context: Record<string, unknown> | undefined): string;
+//# sourceMappingURL=log-severity-floor.backend.utils.d.ts.map

package/dist/esm/monitoring/logger/utils/log-severity-floor.backend.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-severity-floor.backend.utils.d.ts","sourceRoot":"","sources":["../../../../../../src/monitoring/logger/utils/log-severity-floor.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,qBAAqB,CAAC;AAE3D,4FAA4F;AAC5F,eAAO,MAAM,gCAAgC,sBAAsB,CAAC;AAQpE;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAGxG;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC3C,MAAM,CAQR"}

package/dist/esm/monitoring/logger/utils/log-severity-floor.backend.utils.js

@@ -0,0 +1,78 @@
+/**
+ * A LOG-LEVEL FLOOR a structured record can carry, so a boundary that hardcodes its level cannot
+ * bury a fault below the level an operator alerts on.
+ *
+ * ## The defect this exists to close
+ *
+ * `classifyBackendErrorLogSeverity` already answers "does a human need to look at this?" from the
+ * error's own declared contract, and `logWildoBackendErrorAtClassifiedSeverity` emits at that answer.
+ * A **best-effort catch** does not go through either: it writes `logger.warn(msg, { ...ctx,
+ * ...projectCaughtErrorLogFields(error) })`, choosing the level by hand at the call site.
+ *
+ * Measured 2026-09-09: **213 such emissions below `error`, across 86 files**, and the six error types
+ * whose declared severity is CRITICAL (INTERNAL, DATABASE, EXTERNAL_SERVICE, UNCAUGHT_EXCEPTION,
+ * UNHANDLED_REJECTION, INFRASTRUCTURE) are all reachable through any of them. So a swallowed database
+ * failure was emitted at `warn` while the projected fields still said `severity: CRITICAL` — visible
+ * to a reader who greps the field, invisible to a production alert keyed on level, which is what an
+ * operator keys on by default.
+ *
+ * ## Why a floor rather than 213 corrected call sites
+ *
+ * Most of those `warn`s are RIGHT — an expected self-healing condition, a 4xx the caller got wrong —
+ * so a sweep would have to re-judge each one and would rot the next time a boundary is added. The
+ * floor is total over the population instead: every one of those sites already calls the same
+ * projection, so the answer travels with the record and one rule at the sink applies it.
+ *
+ * ## It adds no new judgement, and it can only RAISE
+ *
+ * The floor IS `classifyBackendErrorLogSeverity`'s answer, so every "stays at warn" decision that
+ * function documents is preserved untouched — an expired token still floors at `debug`, a MEDIUM 4xx
+ * at `warn`. And promotion never lowers a level, so a boundary that deliberately logs ABOVE the
+ * classification (a permanently dead-lettered job is operationally an `error` whatever the underlying
+ * business severity) keeps its own louder choice.
+ *
+ * The vocabulary lives HERE, in the logger's own utils, rather than beside the classifier: the
+ * classifier writes the field and the logger reads it, so putting it in the logger's directory keeps
+ * the dependency pointing one way (errors → monitoring) instead of making the two import each other.
+ */
+/**
+ * The context key carrying the floor. Named rather than inlined at the two ends, because a writer and
+ * a reader agreeing on a string literal by coincidence is exactly how this mechanism goes silently
+ * inert.
+ */
+export const LOG_SEVERITY_FLOOR_FIELD = 'logSeverityFloor';
+/** The context key recording what the call site ASKED for, whenever the floor raised it. */
+export const LOG_SEVERITY_PROMOTED_FROM_FIELD = 'promotedFromLevel';
+/**
+ * Emitting order, lowest first. Indices are the comparison, so a level absent from this list has no
+ * rank and is left alone rather than guessed at.
+ */
+const LOG_LEVEL_RANK = ['debug', 'info', 'warn', 'error'];
+/**
+ * The floor a record carries, or `undefined` when it carries none or carries an unrecognised value.
+ *
+ * Unrecognised is deliberately the same answer as absent: this reads a value that arrives through an
+ * untyped `Record<string, unknown>` context, and inventing a rank for a string nobody declared would
+ * promote records on a typo.
+ */
+export function resolveLogSeverityFloor(context) {
+    const floor = context?.[LOG_SEVERITY_FLOOR_FIELD];
+    return typeof floor === 'string' && LOG_LEVEL_RANK.includes(floor) ? floor : undefined;
+}
+/**
+ * The level a record should actually be emitted at: the requested level, unless the record carries a
+ * floor above it.
+ *
+ * Returns the requested level unchanged whenever there is no floor, the floor is unrecognised, or the
+ * requested level is already at or above it — so the common path is untouched.
+ */
+export function resolveEmittedLogLevel(requestedLevel, context) {
+    const floor = resolveLogSeverityFloor(context);
+    if (floor === undefined)
+        return requestedLevel;
+    const requestedRank = LOG_LEVEL_RANK.indexOf(requestedLevel);
+    if (requestedRank < 0)
+        return requestedLevel;
+    return LOG_LEVEL_RANK.indexOf(floor) > requestedRank ? floor : requestedLevel;
+}
+//# sourceMappingURL=log-severity-floor.backend.utils.js.map

package/dist/esm/monitoring/logger/utils/log-severity-floor.backend.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-severity-floor.backend.utils.js","sourceRoot":"","sources":["../../../../../../src/monitoring/logger/utils/log-severity-floor.backend.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAE3D,4FAA4F;AAC5F,MAAM,CAAC,MAAM,gCAAgC,GAAG,mBAAmB,CAAC;AAEpE;;;GAGG;AACH,MAAM,cAAc,GAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAA4C;IAClF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,wBAAwB,CAAC,CAAC;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,cAAsB,EACtB,OAA4C;IAE5C,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC;IAE/C,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,aAAa,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC;IAE7C,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC;AAChF,CAAC","sourcesContent":["/**\n * A LOG-LEVEL FLOOR a structured record can carry, so a boundary that hardcodes its level cannot\n * bury a fault below the level an operator alerts on.\n *\n * ## The defect this exists to close\n *\n * `classifyBackendErrorLogSeverity` already answers \"does a human need to look at this?\" from the\n * error's own declared contract, and `logWildoBackendErrorAtClassifiedSeverity` emits at that answer.\n * A **best-effort catch** does not go through either: it writes `logger.warn(msg, { ...ctx,\n * ...projectCaughtErrorLogFields(error) })`, choosing the level by hand at the call site.\n *\n * Measured 2026-09-09: **213 such emissions below `error`, across 86 files**, and the six error types\n * whose declared severity is CRITICAL (INTERNAL, DATABASE, EXTERNAL_SERVICE, UNCAUGHT_EXCEPTION,\n * UNHANDLED_REJECTION, INFRASTRUCTURE) are all reachable through any of them. So a swallowed database\n * failure was emitted at `warn` while the projected fields still said `severity: CRITICAL` — visible\n * to a reader who greps the field, invisible to a production alert keyed on level, which is what an\n * operator keys on by default.\n *\n * ## Why a floor rather than 213 corrected call sites\n *\n * Most of those `warn`s are RIGHT — an expected self-healing condition, a 4xx the caller got wrong —\n * so a sweep would have to re-judge each one and would rot the next time a boundary is added. The\n * floor is total over the population instead: every one of those sites already calls the same\n * projection, so the answer travels with the record and one rule at the sink applies it.\n *\n * ## It adds no new judgement, and it can only RAISE\n *\n * The floor IS `classifyBackendErrorLogSeverity`'s answer, so every \"stays at warn\" decision that\n * function documents is preserved untouched — an expired token still floors at `debug`, a MEDIUM 4xx\n * at `warn`. And promotion never lowers a level, so a boundary that deliberately logs ABOVE the\n * classification (a permanently dead-lettered job is operationally an `error` whatever the underlying\n * business severity) keeps its own louder choice.\n *\n * The vocabulary lives HERE, in the logger's own utils, rather than beside the classifier: the\n * classifier writes the field and the logger reads it, so putting it in the logger's directory keeps\n * the dependency pointing one way (errors → monitoring) instead of making the two import each other.\n */\n\n/**\n * The context key carrying the floor. Named rather than inlined at the two ends, because a writer and\n * a reader agreeing on a string literal by coincidence is exactly how this mechanism goes silently\n * inert.\n */\nexport const LOG_SEVERITY_FLOOR_FIELD = 'logSeverityFloor';\n\n/** The context key recording what the call site ASKED for, whenever the floor raised it. */\nexport const LOG_SEVERITY_PROMOTED_FROM_FIELD = 'promotedFromLevel';\n\n/**\n * Emitting order, lowest first. Indices are the comparison, so a level absent from this list has no\n * rank and is left alone rather than guessed at.\n */\nconst LOG_LEVEL_RANK: readonly string[] = ['debug', 'info', 'warn', 'error'];\n\n/**\n * The floor a record carries, or `undefined` when it carries none or carries an unrecognised value.\n *\n * Unrecognised is deliberately the same answer as absent: this reads a value that arrives through an\n * untyped `Record<string, unknown>` context, and inventing a rank for a string nobody declared would\n * promote records on a typo.\n */\nexport function resolveLogSeverityFloor(context: Record<string, unknown> | undefined): string | undefined {\n  const floor = context?.[LOG_SEVERITY_FLOOR_FIELD];\n  return typeof floor === 'string' && LOG_LEVEL_RANK.includes(floor) ? floor : undefined;\n}\n\n/**\n * The level a record should actually be emitted at: the requested level, unless the record carries a\n * floor above it.\n *\n * Returns the requested level unchanged whenever there is no floor, the floor is unrecognised, or the\n * requested level is already at or above it — so the common path is untouched.\n */\nexport function resolveEmittedLogLevel(\n  requestedLevel: string,\n  context: Record<string, unknown> | undefined,\n): string {\n  const floor = resolveLogSeverityFloor(context);\n  if (floor === undefined) return requestedLevel;\n\n  const requestedRank = LOG_LEVEL_RANK.indexOf(requestedLevel);\n  if (requestedRank < 0) return requestedLevel;\n\n  return LOG_LEVEL_RANK.indexOf(floor) > requestedRank ? floor : requestedLevel;\n}\n"]}