evlog 2.14.1 → 2.15.0

package/dist/audit--n0QRR2Y.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit--n0QRR2Y.mjs","names":["getSharedHeader"],"sources":["../src/redact.ts","../src/shared/plugin.ts","../src/logger.ts","../src/audit.ts"],"sourcesContent":["import type { RedactConfig } from './types'\n\nconst DEFAULT_REPLACEMENT = '[REDACTED]'\n\nexport type Masker = [RegExp, (match: string) => string]\n\n/**\n * Built-in PII detection patterns with smart masking.\n * Each builtin preserves just enough signal for debugging while scrubbing PII.\n */\nexport const builtinPatterns = {\n  /** Credit card numbers → ****1111 (PCI DSS: last 4 allowed) */\n  creditCard: {\n    pattern: /\\b\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}\\b/g,\n    mask: (m: string) => `****${m.replace(/[\\s-]/g, '').slice(-4)}`,\n  },\n  /** Email addresses → a***@***.com */\n  email: {\n    pattern: /[\\w.+-]+@[\\w-]+\\.[\\w.]+/g,\n    mask: (m: string) => {\n      const at = m.indexOf('@')\n      if (at < 1) return '***@***'\n      const tld = m.slice(m.lastIndexOf('.'))\n      return `${m[0]}***@***${tld}`\n    },\n  },\n  /** IPv4 addresses → ***.***.***.100 (last octet only) */\n  ipv4: {\n    pattern: /\\b(?!0\\.0\\.0\\.0\\b)(?!127\\.0\\.0\\.1\\b)\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\b/g,\n    mask: (m: string) => `***.***.***.${m.split('.').pop()}`,\n  },\n  /**\n   * International phone numbers → `+33******78` (country code + last 2 digits).\n   *\n   * Requires an explicit phone signal (`+countryCode` prefix or `(areaCode)`\n   * parens) to avoid false positives on digit-rich identifiers (UUIDs,\n   * idempotency keys, order ids, hex hashes). Bare digit runs like `12345678`\n   * are intentionally not matched — opt in via custom `patterns` if your app\n   * stores phones in unformatted form.\n   */\n  phone: {\n    pattern: /(?:\\+\\d{1,3}[\\s.-]?\\(?\\d{1,4}\\)?|\\(\\d{1,4}\\))(?:[\\s.-]?\\d{2,4}){2,4}\\b/g,\n    mask: (m: string) => {\n      const digits = m.replace(/[^\\d]/g, '')\n      const hasPlus = m.startsWith('+')\n      if (hasPlus && digits.length > 4) {\n        const ccMatch = m.match(/^\\+\\d{1,3}/)\n        const cc = ccMatch ? ccMatch[0] : '+'\n        return `${cc}******${digits.slice(-2)}`\n      }\n      if (digits.length > 2) {\n        return `${'*'.repeat(digits.length - 2)}${digits.slice(-2)}`\n      }\n      return '***'\n    },\n  },\n  /** JWT tokens → eyJ***.*** */\n  jwt: {\n    pattern: /\\beyJ[\\w-]*\\.[\\w-]*\\.[\\w-]*\\b/g,\n    mask: () => 'eyJ***.***',\n  },\n  /** Bearer tokens → Bearer *** */\n  bearer: {\n    pattern: /\\bBearer\\s+[\\w\\-.~+/]{8,}=*/gi,\n    mask: () => 'Bearer ***',\n  },\n  /** IBAN → FR76****189 (country + check digits + last 3) */\n  iban: {\n    pattern: /\\b[A-Z]{2}\\d{2}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{0,4}[\\s-]?[\\dA-Z]{0,4}[\\s-]?[\\dA-Z]{0,4}\\b/g,\n    mask: (m: string) => {\n      const clean = m.replace(/[\\s-]/g, '')\n      return `${clean.slice(0, 4)}****${clean.slice(-3)}`\n    },\n  },\n} as const\n\nexport type BuiltinPatternName = keyof typeof builtinPatterns\n\n/**\n * Resolve a `redact` option (boolean or object) into a concrete `RedactConfig`.\n *\n * - `true` → all built-in patterns with smart masking, no custom paths\n * - `{ ... }` → built-in maskers merged with user config (opt-out: `builtins: false`)\n * - `false` / `undefined` → `undefined` (no redaction)\n */\nexport function resolveRedactConfig(input: boolean | RedactConfig | undefined): RedactConfig | undefined {\n  if (input === undefined || input === false) return undefined\n\n  if (input === true) {\n    return { _maskers: allBuiltinMaskers() }\n  }\n\n  if (input.builtins === false) {\n    return input\n  }\n\n  const maskers = Array.isArray(input.builtins)\n    ? input.builtins\n      .map(name => builtinPatterns[name])\n      .filter(Boolean)\n      .map(b => [cloneRegex(b.pattern), b.mask] as Masker)\n    : allBuiltinMaskers()\n\n  return {\n    ...input,\n    _maskers: maskers,\n  }\n}\n\nfunction allBuiltinMaskers(): Masker[] {\n  return Object.values(builtinPatterns).map(b => [cloneRegex(b.pattern), b.mask] as Masker)\n}\n\nfunction cloneRegex(re: RegExp): RegExp {\n  return new RegExp(re.source, re.flags)\n}\n\n/**\n * Redact sensitive data from a wide event in-place.\n *\n * Three strategies applied in order:\n * 1. **Path-based**: dot-notation paths — the leaf value is replaced with `replacement`.\n * 2. **Masker-based**: built-in patterns with smart partial masking (e.g. `****1111`).\n * 3. **Pattern-based**: custom RegExp patterns replaced with `replacement`.\n *\n * @param event - The wide event object (mutated in-place).\n * @param config - Redaction configuration.\n */\nexport function redactEvent(event: Record<string, unknown>, config: RedactConfig): void {\n  const replacement = config.replacement ?? DEFAULT_REPLACEMENT\n\n  if (config.paths?.length) {\n    for (const path of config.paths) {\n      redactPath(event, path.split('.'), replacement)\n    }\n  }\n\n  if (config._maskers?.length) {\n    applyMaskersToTree(event, config._maskers)\n  }\n\n  if (config.patterns?.length) {\n    redactPatterns(event, config.patterns, replacement)\n  }\n}\n\nfunction redactPath(obj: Record<string, unknown>, segments: string[], replacement: string): void {\n  let current: unknown = obj\n  for (let i = 0; i < segments.length - 1; i++) {\n    if (current === null || current === undefined || typeof current !== 'object') return\n    current = (current as Record<string, unknown>)[segments[i]!]\n  }\n\n  if (current === null || current === undefined || typeof current !== 'object') return\n\n  const leaf = segments[segments.length - 1]!\n  if (leaf in (current as Record<string, unknown>)) {\n    (current as Record<string, unknown>)[leaf] = replacement\n  }\n}\n\nfunction redactPatterns(obj: unknown, patterns: RegExp[], replacement: string): void {\n  if (obj === null || obj === undefined) return\n\n  if (Array.isArray(obj)) {\n    for (let i = 0; i < obj.length; i++) {\n      if (typeof obj[i] === 'string') {\n        obj[i] = applyPatterns(obj[i] as string, patterns, replacement)\n      } else if (typeof obj[i] === 'object') {\n        redactPatterns(obj[i], patterns, replacement)\n      }\n    }\n    return\n  }\n\n  if (typeof obj === 'object') {\n    const record = obj as Record<string, unknown>\n    for (const key in record) {\n      const val = record[key]\n      if (typeof val === 'string') {\n        record[key] = applyPatterns(val, patterns, replacement)\n      } else if (typeof val === 'object') {\n        redactPatterns(val, patterns, replacement)\n      }\n    }\n  }\n}\n\nfunction applyPatterns(value: string, patterns: RegExp[], replacement: string): string {\n  let result = value\n  for (const pattern of patterns) {\n    pattern.lastIndex = 0\n    result = result.replace(pattern, replacement)\n  }\n  return result\n}\n\nfunction applyMaskersToTree(obj: unknown, maskers: Masker[]): void {\n  if (obj === null || obj === undefined) return\n\n  if (Array.isArray(obj)) {\n    for (let i = 0; i < obj.length; i++) {\n      if (typeof obj[i] === 'string') {\n        obj[i] = applyMaskers(obj[i] as string, maskers)\n      } else if (typeof obj[i] === 'object') {\n        applyMaskersToTree(obj[i], maskers)\n      }\n    }\n    return\n  }\n\n  if (typeof obj === 'object') {\n    const record = obj as Record<string, unknown>\n    for (const key in record) {\n      const val = record[key]\n      if (typeof val === 'string') {\n        record[key] = applyMaskers(val, maskers)\n      } else if (typeof val === 'object') {\n        applyMaskersToTree(val, maskers)\n      }\n    }\n  }\n}\n\nfunction applyMaskers(value: string, maskers: Masker[]): string {\n  let result = value\n  for (const [pattern, mask] of maskers) {\n    pattern.lastIndex = 0\n    result = result.replace(pattern, mask)\n  }\n  return result\n}\n\n/**\n * Normalize a redact config that may have been deserialized from JSON\n * (e.g. via `process.env.__EVLOG_CONFIG`). Converts pattern strings\n * back to RegExp instances, then resolves built-in patterns.\n */\nexport function normalizeRedactConfig(raw: boolean | Record<string, unknown> | undefined): RedactConfig | undefined {\n  if (raw === undefined || raw === false) return undefined\n  if (raw === true) return resolveRedactConfig(true)\n\n  const config: RedactConfig = {}\n\n  if (Array.isArray(raw.paths)) {\n    config.paths = raw.paths as string[]\n  }\n\n  if (typeof raw.replacement === 'string') {\n    config.replacement = raw.replacement\n  }\n\n  if (raw.builtins === false) {\n    config.builtins = false\n  } else if (Array.isArray(raw.builtins)) {\n    config.builtins = raw.builtins as BuiltinPatternName[]\n  }\n\n  if (Array.isArray(raw.patterns)) {\n    config.patterns = (raw.patterns as unknown[]).map((p) => {\n      if (p instanceof RegExp) return p\n      if (typeof p === 'string') return new RegExp(p, 'g')\n      if (typeof p === 'object' && p !== null) {\n        const obj = p as Record<string, string>\n        return new RegExp(obj.source, obj.flags ?? 'g')\n      }\n      return null\n    }).filter((p): p is RegExp => p !== null)\n  }\n\n  return resolveRedactConfig(config)\n}\n","import type { DrainContext, EnrichContext, EnvironmentContext, RequestLogger, TailSamplingContext, WideEvent } from '../types'\n\n/** Context passed to {@link EvlogPlugin.setup} when the plugin is registered. */\nexport interface PluginSetupContext {\n  env: EnvironmentContext\n}\n\n/** Per-request context for `onRequestStart` / `onRequestFinish`. */\nexport interface RequestLifecycleContext {\n  logger: RequestLogger\n  request: {\n    method: string\n    path: string\n    requestId?: string\n  }\n  /** Pre-filtered safe request headers (sensitive headers stripped). */\n  headers?: Record<string, string>\n}\n\nexport interface RequestFinishContext extends RequestLifecycleContext {\n  /** `null` when the event was sampled out or disabled. */\n  event: WideEvent | null\n  status?: number\n  durationMs: number\n  error?: Error\n}\n\n/** Context passed to {@link EvlogPlugin.onClientLog} for client-submitted events. */\nexport interface ClientLogContext {\n  /** Raw client payload, before normalization. */\n  payload: Record<string, unknown>\n  request?: {\n    method?: string\n    path?: string\n  }\n  headers?: Record<string, string>\n}\n\n/**\n * Canonical extension point for evlog. A plugin can opt into any subset of\n * hooks; drains and enrichers are special cases (see {@link drainPlugin} and\n * {@link enricherPlugin}).\n *\n * @example\n * ```ts\n * export const tenantPlugin = definePlugin({\n *   name: 'tenant',\n *   onRequestStart({ logger, headers }) {\n *     const tenantId = headers?.['x-tenant-id']\n *     if (tenantId) logger.set({ tenant: { id: tenantId } })\n *   },\n *   enrich({ event }) {\n *     event.region = process.env.REGION\n *   },\n * })\n * ```\n */\nexport interface EvlogPlugin {\n  /** Stable identifier. Used for de-duplication and error messages. */\n  name: string\n  /** Run-once when the plugin is registered. */\n  setup?: (ctx: PluginSetupContext) => void | Promise<void>\n  /** Runs before drain. */\n  enrich?: (ctx: EnrichContext) => void | Promise<void>\n  /** Called for every emitted event. */\n  drain?: (ctx: DrainContext) => void | Promise<void>\n  /** Tail sampling hook. Set `ctx.shouldKeep = true` to force-keep. */\n  keep?: (ctx: TailSamplingContext) => void | Promise<void>\n  onRequestStart?: (ctx: RequestLifecycleContext) => void\n  onRequestFinish?: (ctx: RequestFinishContext) => void\n  /** Observe events submitted from browser/edge clients. */\n  onClientLog?: (ctx: ClientLogContext) => void\n  /**\n   * Decorate per-request loggers with extra methods. Augment `RequestLogger`\n   * in a `.d.ts` to expose them on `useLogger()`.\n   */\n  extendLogger?: (logger: RequestLogger) => void\n}\n\n/** Identity helper preserving plugin type inference. */\nexport function definePlugin(plugin: EvlogPlugin): EvlogPlugin {\n  return plugin\n}\n\n/** Wrap a standalone drain callback as an {@link EvlogPlugin}. */\nexport function drainPlugin(name: string, drain: NonNullable<EvlogPlugin['drain']>): EvlogPlugin {\n  return { name, drain }\n}\n\n/** Wrap a standalone enricher callback as an {@link EvlogPlugin}. */\nexport function enricherPlugin(name: string, enrich: NonNullable<EvlogPlugin['enrich']>): EvlogPlugin {\n  return { name, enrich }\n}\n\n/**\n * Compiled view of a plugin set. Errors from individual hooks are caught and\n * logged to `console.error` with the plugin name — they never break the request.\n */\nexport interface PluginRunner {\n  readonly plugins: readonly EvlogPlugin[]\n  /** `true` when at least one plugin implements the matching hook. */\n  readonly hasEnrich: boolean\n  readonly hasDrain: boolean\n  readonly hasKeep: boolean\n  readonly hasRequestLifecycle: boolean\n  readonly hasClientLog: boolean\n  readonly hasExtendLogger: boolean\n  applyExtendLogger: (logger: RequestLogger) => void\n  runOnRequestStart: (ctx: RequestLifecycleContext) => void\n  runOnRequestFinish: (ctx: RequestFinishContext) => void\n  runEnrich: (ctx: EnrichContext) => Promise<void>\n  /** Drains run concurrently (`Promise.allSettled`). */\n  runDrain: (ctx: DrainContext) => Promise<void>\n  runKeep: (ctx: TailSamplingContext) => Promise<void>\n  runOnClientLog: (ctx: ClientLogContext) => void\n  runSetup: (ctx: PluginSetupContext) => Promise<void>\n}\n\nfunction logPluginError(name: string, hook: string, err: unknown): void {\n  console.error(`[evlog/${name}] ${hook} failed:`, err)\n}\n\n/** De-duplicates by `name` — last registration wins. */\nexport function createPluginRunner(plugins: EvlogPlugin[] = []): PluginRunner {\n  const byName = new Map<string, EvlogPlugin>()\n  for (const plugin of plugins) {\n    byName.set(plugin.name, plugin)\n  }\n  const list = Array.from(byName.values())\n\n  const hasEnrich = list.some(p => typeof p.enrich === 'function')\n  const hasDrain = list.some(p => typeof p.drain === 'function')\n  const hasKeep = list.some(p => typeof p.keep === 'function')\n  const hasRequestLifecycle = list.some(\n    p => typeof p.onRequestStart === 'function' || typeof p.onRequestFinish === 'function',\n  )\n  const hasClientLog = list.some(p => typeof p.onClientLog === 'function')\n  const hasExtendLogger = list.some(p => typeof p.extendLogger === 'function')\n\n  return {\n    plugins: list,\n    hasEnrich,\n    hasDrain,\n    hasKeep,\n    hasRequestLifecycle,\n    hasClientLog,\n    hasExtendLogger,\n    applyExtendLogger(logger) {\n      for (const plugin of list) {\n        if (!plugin.extendLogger) continue\n        try {\n          plugin.extendLogger(logger)\n        } catch (err) {\n          logPluginError(plugin.name, 'extendLogger', err)\n        }\n      }\n    },\n    runOnRequestStart(ctx) {\n      for (const plugin of list) {\n        if (!plugin.onRequestStart) continue\n        try {\n          plugin.onRequestStart(ctx)\n        } catch (err) {\n          logPluginError(plugin.name, 'onRequestStart', err)\n        }\n      }\n    },\n    runOnRequestFinish(ctx) {\n      for (const plugin of list) {\n        if (!plugin.onRequestFinish) continue\n        try {\n          plugin.onRequestFinish(ctx)\n        } catch (err) {\n          logPluginError(plugin.name, 'onRequestFinish', err)\n        }\n      }\n    },\n    async runEnrich(ctx) {\n      for (const plugin of list) {\n        if (!plugin.enrich) continue\n        try {\n          await plugin.enrich(ctx)\n        } catch (err) {\n          logPluginError(plugin.name, 'enrich', err)\n        }\n      }\n    },\n    async runDrain(ctx) {\n      const drains = list.filter(p => typeof p.drain === 'function')\n      if (drains.length === 0) return\n      await Promise.allSettled(\n        drains.map(async (plugin) => {\n          try {\n            await plugin.drain!(ctx)\n          } catch (err) {\n            logPluginError(plugin.name, 'drain', err)\n          }\n        }),\n      )\n    },\n    async runKeep(ctx) {\n      for (const plugin of list) {\n        if (!plugin.keep) continue\n        try {\n          await plugin.keep(ctx)\n        } catch (err) {\n          logPluginError(plugin.name, 'keep', err)\n        }\n      }\n    },\n    runOnClientLog(ctx) {\n      for (const plugin of list) {\n        if (!plugin.onClientLog) continue\n        try {\n          plugin.onClientLog(ctx)\n        } catch (err) {\n          logPluginError(plugin.name, 'onClientLog', err)\n        }\n      }\n    },\n    async runSetup(ctx) {\n      for (const plugin of list) {\n        if (!plugin.setup) continue\n        try {\n          await plugin.setup(ctx)\n        } catch (err) {\n          logPluginError(plugin.name, 'setup', err)\n        }\n      }\n    },\n  }\n}\n\nconst emptyRunner = createPluginRunner([])\n\n/** Shared no-op runner used when no plugins are registered. */\nexport function getEmptyPluginRunner(): PluginRunner {\n  return emptyRunner\n}\n","import type { AuditableLogger, AuditInput, AuditMethod } from './audit'\nimport type { DrainContext, EnvironmentContext, FieldContext, Log, LogLevel, LoggerConfig, RedactConfig, RequestLogger, RequestLoggerOptions, SamplingConfig, TailSamplingContext, WideEvent } from './types'\nimport { buildAuditFields, consumeAuditForceKeep, finalizeAudit } from './audit'\nimport { redactEvent, resolveRedactConfig } from './redact'\nimport type { PluginRunner } from './shared/plugin'\nimport { createPluginRunner, getEmptyPluginRunner } from './shared/plugin'\nimport { colors, cssColors, detectEnvironment, escapeFormatString, formatDuration, getConsoleMethod, getCssLevelColor, getLevelColor, isBrowser, isDev, isLevelEnabled, matchesPattern } from './utils'\n\nfunction isPlainObject(val: unknown): val is Record<string, unknown> {\n  return val !== null && typeof val === 'object' && !Array.isArray(val)\n}\n\nconst _tsDate = new Date()\nfunction isoNow(): string {\n  _tsDate.setTime(Date.now())\n  return _tsDate.toISOString()\n}\n\n/** Shown after post-emit warnings so users can fix fire-and-forget / ALS continuations. */\nconst POST_EMIT_FORK_HINT =\n  'For intentional background work tied to this request, use log.fork(\\'label\\', fn) when your integration supports it (see https://evlog.dev).'\n\nfunction warnPostEmit(method: string, detail: string): void {\n  console.warn(\n    `[evlog] ${method} called after the wide event was emitted — ${detail} This data will not appear in observability. ${POST_EMIT_FORK_HINT}`,\n  )\n}\n\nfunction mergeInto(target: Record<string, unknown>, source: Record<string, unknown>): void {\n  for (const key in source) {\n    const sourceVal = source[key]\n    if (sourceVal === undefined || sourceVal === null) continue\n    const targetVal = target[key]\n    if (isPlainObject(sourceVal) && isPlainObject(targetVal)) {\n      mergeInto(targetVal, sourceVal)\n    } else if (Array.isArray(targetVal) && Array.isArray(sourceVal)) {\n      target[key] = [...targetVal, ...sourceVal]\n    } else {\n      target[key] = sourceVal\n    }\n  }\n}\n\nlet globalEnv: EnvironmentContext = {\n  service: 'app',\n  environment: 'development',\n}\n\nlet globalPretty = isDev()\nlet globalSampling: SamplingConfig = {}\nlet globalStringify = true\nlet globalDrain: ((ctx: DrainContext) => void | Promise<void>) | undefined\nlet globalRedact: RedactConfig | undefined\nlet globalEnabled = true\nlet globalSilent = false\n/** Minimum level for the global `log` API only (`ownsEvent === false`). Default: all levels. */\nlet globalMinLevel: LogLevel = 'debug'\nlet _locked = false\nlet globalPluginRunner: PluginRunner = getEmptyPluginRunner()\n\n/**\n * Initialize the logger with configuration.\n * Call this once at application startup.\n */\nexport function initLogger(config: LoggerConfig = {}): void {\n  globalEnabled = config.enabled ?? true\n  const detected = detectEnvironment()\n\n  globalEnv = {\n    service: config.env?.service ?? detected.service ?? 'app',\n    environment: config.env?.environment ?? detected.environment ?? 'development',\n    version: config.env?.version ?? detected.version,\n    commitHash: config.env?.commitHash ?? detected.commitHash,\n    region: config.env?.region ?? detected.region,\n  }\n\n  globalPretty = config.pretty ?? isDev()\n  globalSampling = config.sampling ?? {}\n  globalStringify = config.stringify ?? true\n  globalDrain = config.drain\n  globalRedact = resolveRedactConfig(config.redact ?? !isDev())\n  globalSilent = config.silent ?? false\n  globalMinLevel = config.minLevel ?? 'debug'\n  globalPluginRunner = config.plugins?.length\n    ? createPluginRunner(config.plugins)\n    : getEmptyPluginRunner()\n\n  if (globalPluginRunner.plugins.length > 0) {\n    void globalPluginRunner.runSetup({ env: { ...globalEnv } })\n  }\n\n  const hasAnyDrain = !!globalDrain || globalPluginRunner.hasDrain\n  if (globalSilent && !hasAnyDrain && !config._suppressDrainWarning) {\n    console.warn('[evlog] silent mode is enabled but no drain is configured. Events will be built and sampled but not output anywhere. Set a drain via initLogger({ drain }) or a framework hook (evlog:drain).')\n  }\n}\n\n/**\n * @internal Get the globally registered plugin runner.\n * Used by framework middleware so plugins also fire on routes that pre-date\n * the middleware-level options.\n */\nexport function getGlobalPluginRunner(): PluginRunner {\n  return globalPluginRunner\n}\n\n/**\n * Check if logging is globally enabled.\n */\nexport function isEnabled(): boolean {\n  return globalEnabled\n}\n\n/**\n * @internal Lock the logger to prevent re-initialization.\n * Called by instrumentation register() after setting up the logger with drain.\n * Prevents configureHandler() from overwriting the drain config.\n */\nexport function lockLogger(): void {\n  _locked = true\n}\n\n/**\n * @internal Check if the logger has been locked by instrumentation.\n */\nexport function isLoggerLocked(): boolean {\n  return _locked\n}\n\n/**\n * @internal Get the globally configured drain callback.\n * Used by framework middleware to fall back to the global drain\n * when no middleware-level drain is provided.\n */\nexport function getGlobalDrain(): ((ctx: DrainContext) => void | Promise<void>) | undefined {\n  return globalDrain\n}\n\n/**\n * Determine if a log at the given level should be emitted based on sampling config.\n * Error level defaults to 100% (always logged) unless explicitly configured otherwise.\n */\nfunction shouldSample(level: LogLevel): boolean {\n  const { rates } = globalSampling\n  if (!rates) {\n    return true // No sampling configured, log everything\n  }\n\n  // Error defaults to 100% unless explicitly set\n  const percentage = level === 'error' && rates.error === undefined\n    ? 100\n    : rates[level] ?? 100\n\n  // 0% = never log, 100% = always log\n  if (percentage <= 0) return false\n  if (percentage >= 100) return true\n\n  return Math.random() * 100 < percentage\n}\n\n/**\n * Evaluate tail sampling conditions to determine if a log should be force-kept.\n * Returns true if ANY condition matches (OR logic).\n */\nexport function shouldKeep(ctx: TailSamplingContext): boolean {\n  const { keep } = globalSampling\n  if (!keep?.length) return false\n\n  return keep.some((condition) => {\n    if (condition.status !== undefined && ctx.status !== undefined && ctx.status >= condition.status) {\n      return true\n    }\n    if (condition.duration !== undefined && ctx.duration !== undefined && ctx.duration >= condition.duration) {\n      return true\n    }\n    if (condition.path && ctx.path && matchesPattern(ctx.path, condition.path)) {\n      return true\n    }\n    return false\n  })\n}\n\ninterface EmitWideEventOptions {\n  deferDrain?: boolean\n  ownsEvent?: boolean\n  waitUntil?: (promise: Promise<unknown>) => void\n}\n\nfunction emitWideEvent(\n  level: LogLevel,\n  event: Record<string, unknown>,\n  options: EmitWideEventOptions = {},\n): WideEvent | null {\n  const { deferDrain = false, ownsEvent = false, waitUntil } = options\n  if (!globalEnabled) return null\n\n  if (!ownsEvent) {\n    if (!isLevelEnabled(level, globalMinLevel)) {\n      return null\n    }\n    if (!shouldSample(level)) {\n      return null\n    }\n  }\n\n  let formatted: WideEvent\n  if (ownsEvent) {\n    event.timestamp = isoNow()\n    event.level = level\n    if (event.service === undefined) event.service = globalEnv.service\n    if (event.environment === undefined) event.environment = globalEnv.environment\n    if (globalEnv.version !== undefined && event.version === undefined) event.version = globalEnv.version\n    if (globalEnv.commitHash !== undefined && event.commitHash === undefined) event.commitHash = globalEnv.commitHash\n    if (globalEnv.region !== undefined && event.region === undefined) event.region = globalEnv.region\n    formatted = event as WideEvent\n  } else {\n    formatted = {\n      timestamp: isoNow(),\n      level,\n      ...globalEnv,\n      ...event,\n    }\n  }\n\n  finalizeAudit(formatted)\n\n  if (globalRedact) {\n    redactEvent(formatted, globalRedact)\n  }\n\n  if (!globalSilent) {\n    if (globalPretty) {\n      prettyPrintWideEvent(formatted)\n    } else if (globalStringify) {\n      console[getConsoleMethod(level)](JSON.stringify(formatted))\n    } else {\n      console[getConsoleMethod(level)](formatted)\n    }\n  }\n\n  if (!deferDrain) {\n    const drainPromises: Array<Promise<unknown>> = []\n    if (globalDrain) {\n      drainPromises.push(\n        (async () => {\n          try {\n            await globalDrain!({ event: formatted })\n          } catch (err) {\n            console.error('[evlog] drain failed:', err)\n          }\n        })(),\n      )\n    }\n    if (globalPluginRunner.hasDrain) {\n      drainPromises.push(globalPluginRunner.runDrain({ event: formatted }))\n    }\n    if (drainPromises.length > 0 && waitUntil) {\n      waitUntil(Promise.all(drainPromises))\n    }\n  }\n\n  return formatted\n}\n\nfunction emitTaggedLog(level: LogLevel, tag: string, message: string): void {\n  if (!globalEnabled) return\n\n  if (globalPretty && !globalSilent) {\n    if (!isLevelEnabled(level, globalMinLevel)) {\n      return\n    }\n    if (!shouldSample(level)) {\n      return\n    }\n\n    if (isBrowser()) {\n      const levelColor = getCssLevelColor(level)\n      const timestamp = isoNow().slice(11, 23)\n      console.log(\n        `%c${timestamp}%c %c[${escapeFormatString(tag)}]%c ${escapeFormatString(message)}`,\n        cssColors.dim,\n        cssColors.reset,\n        levelColor,\n        cssColors.reset,\n      )\n    } else {\n      const color = getLevelColor(level)\n      const timestamp = isoNow().slice(11, 23)\n      console.log(`${colors.dim}${timestamp}${colors.reset} ${color}[${tag}]${colors.reset} ${message}`)\n    }\n\n    return\n  }\n  emitWideEvent(level, { tag, message })\n}\n\nfunction formatValue(value: unknown): string {\n  if (value === null || value === undefined) {\n    return String(value)\n  }\n  if (typeof value === 'object') {\n    const pairs: string[] = []\n    for (const [k, v] of Object.entries(value as Record<string, unknown>)) {\n      if (v !== undefined && v !== null) {\n        if (typeof v === 'object') {\n          pairs.push(`${k}=${JSON.stringify(v)}`)\n        } else {\n          pairs.push(`${k}=${v}`)\n        }\n      }\n    }\n    return pairs.join(' ')\n  }\n  return String(value)\n}\n\nfunction formatCost(cost: number): string {\n  if (cost < 0.01) return `$${cost.toFixed(6)}`\n  if (cost < 1) return `$${cost.toFixed(4)}`\n  return `$${cost.toFixed(2)}`\n}\n\ninterface TreeEntry {\n  key: string\n  value: string\n  children?: string[]\n}\n\nfunction buildAIEntries(ai: Record<string, unknown>): TreeEntry[] {\n  const entries: TreeEntry[] = []\n\n  // Header\n  const headerParts: string[] = []\n  if (ai.model) {\n    let m = String(ai.model)\n    if (ai.provider) m += ` (${ai.provider})`\n    headerParts.push(m)\n  }\n  if (ai.calls) headerParts.push(`${ai.calls} call${(ai.calls as number) > 1 ? 's' : ''}`)\n  if (ai.steps && (ai.steps as number) > 1) headerParts.push(`${ai.steps} steps`)\n  entries.push({ key: 'ai', value: headerParts.join(' · ') })\n\n  // Tokens\n  const inputTokens = ai.inputTokens as number | undefined\n  const outputTokens = ai.outputTokens as number | undefined\n  const totalTokens = ai.totalTokens as number | undefined\n  if (inputTokens !== undefined && outputTokens !== undefined) {\n    let tokLine = `${inputTokens} in → ${outputTokens} out`\n    if (totalTokens) tokLine += ` (${totalTokens} total)`\n    const extras: string[] = []\n    if (ai.cacheReadTokens) extras.push(`${ai.cacheReadTokens} cache read`)\n    if (ai.cacheWriteTokens) extras.push(`${ai.cacheWriteTokens} cache write`)\n    if (ai.reasoningTokens) extras.push(`${ai.reasoningTokens} reasoning`)\n    if (extras.length) tokLine += ` · ${extras.join(' · ')}`\n    entries.push({ key: 'ai.tokens', value: tokLine })\n  }\n\n  // Streaming\n  const msFirst = ai.msToFirstChunk as number | undefined\n  const msFinish = ai.msToFinish as number | undefined\n  const tps = ai.tokensPerSecond as number | undefined\n  if (msFirst !== undefined || msFinish !== undefined) {\n    const parts: string[] = []\n    if (msFirst !== undefined) parts.push(`${formatDuration(msFirst)} to first chunk`)\n    if (msFinish !== undefined) parts.push(`${formatDuration(msFinish)} total`)\n    let streamLine = parts.join(' → ')\n    if (tps) streamLine += ` · ${tps} tok/s`\n    entries.push({ key: 'ai.streaming', value: streamLine })\n  }\n\n  // Cost\n  if (ai.estimatedCost !== undefined) {\n    entries.push({ key: 'ai.cost', value: formatCost(ai.estimatedCost as number) })\n  }\n\n  // Total duration\n  if (ai.totalDurationMs !== undefined) {\n    entries.push({ key: 'ai.totalDuration', value: formatDuration(ai.totalDurationMs as number) })\n  }\n\n  // Tools — merged from toolCalls (middleware) + tools (telemetry)\n  const toolCalls = ai.toolCalls as unknown[] | undefined\n  const tools = ai.tools as Array<{ name: string, durationMs: number, success: boolean, error?: string }> | undefined\n  const hasInputs = toolCalls?.length ? typeof toolCalls[0] === 'object' : false\n\n  if (tools?.length) {\n    const children = tools.map((t, idx) => {\n      const mark = t.success ? '✓' : '✗'\n      let line = `${t.name} ${formatDuration(t.durationMs)} ${mark}`\n      if (t.error) line += ` ${t.error}`\n      if (hasInputs && toolCalls && idx < toolCalls.length) {\n        const tc = toolCalls[idx] as { input: unknown }\n        const inputStr = typeof tc.input === 'string' ? tc.input : JSON.stringify(tc.input)\n        const truncated = inputStr.length > 100 ? `${inputStr.slice(0, 100)}…` : inputStr\n        line += ` ${truncated}`\n      }\n      return line\n    })\n    entries.push({ key: 'ai.tools', value: '', children })\n  } else if (toolCalls?.length) {\n    if (hasInputs) {\n      const children = (toolCalls as Array<{ name: string, input: unknown }>).map((tc) => {\n        const inputStr = typeof tc.input === 'string' ? tc.input : JSON.stringify(tc.input)\n        const truncated = inputStr.length > 100 ? `${inputStr.slice(0, 100)}…` : inputStr\n        return `${tc.name}(${truncated})`\n      })\n      entries.push({ key: 'ai.tools', value: '', children })\n    } else {\n      entries.push({ key: 'ai.tools', value: (toolCalls as string[]).join(', ') })\n    }\n  }\n\n  // Steps\n  const stepsUsage = ai.stepsUsage as Array<Record<string, unknown>> | undefined\n  if (stepsUsage?.length) {\n    const allSameModel = stepsUsage.every(s => s.model === stepsUsage[0]!.model)\n    const children = stepsUsage.map((s) => {\n      const prefix = allSameModel ? '' : `${s.model} `\n      let line = `${prefix}${s.inputTokens} in → ${s.outputTokens} out`\n      const stepTools = s.toolCalls as string[] | undefined\n      if (stepTools?.length) line += ` [${stepTools.join(', ')}]`\n      return line\n    })\n    entries.push({ key: 'ai.steps', value: '', children })\n  } else if (ai.steps && (ai.steps as number) > 1) {\n    entries.push({ key: 'ai.steps', value: String(ai.steps) })\n  }\n\n  // Embedding\n  const embedding = ai.embedding as Record<string, unknown> | undefined\n  if (embedding) {\n    const parts: string[] = []\n    if (embedding.model) parts.push(String(embedding.model))\n    parts.push(`${embedding.tokens} tokens`)\n    if (embedding.dimensions) parts.push(`${embedding.dimensions}d`)\n    if (embedding.count) parts.push(`${embedding.count} items`)\n    entries.push({ key: 'ai.embedding', value: parts.join(' · ') })\n  }\n\n  if (ai.finishReason) entries.push({ key: 'ai.finishReason', value: String(ai.finishReason) })\n  if (ai.error) entries.push({ key: 'ai.error', value: String(ai.error) })\n  if (ai.responseId) entries.push({ key: 'ai.responseId', value: String(ai.responseId) })\n\n  return entries\n}\n\nfunction prettyPrintWideEvent(event: Record<string, unknown>): void {\n  const { timestamp, level, service, environment, version, ...rest } = event\n  const ts = (timestamp as string).slice(11, 23)\n  const browser = isBrowser()\n\n  const parts: string[] = []\n  const styles: string[] = []\n\n  if (browser) {\n    const lc = getCssLevelColor(level as string)\n    parts.push(`%c${ts}%c %c${(level as string).toUpperCase()}%c %c[${escapeFormatString(String(service))}]%c`)\n    styles.push(cssColors.dim, cssColors.reset, lc, cssColors.reset, cssColors.cyan, cssColors.reset)\n  } else {\n    const lc = getLevelColor(level as string)\n    parts.push(`${colors.dim}${ts}${colors.reset} ${lc}${(level as string).toUpperCase()}${colors.reset} ${colors.cyan}[${service}]${colors.reset}`)\n  }\n\n  if (rest.method && rest.path) {\n    parts.push(browser ? ` ${escapeFormatString(String(rest.method))} ${escapeFormatString(String(rest.path))}` : ` ${rest.method} ${rest.path}`)\n    delete rest.method\n    delete rest.path\n  }\n\n  if (rest.status) {\n    const sc = browser\n      ? ((rest.status as number) >= 400 ? cssColors.red : cssColors.green)\n      : ((rest.status as number) >= 400 ? colors.red : colors.green)\n    if (browser) {\n      parts.push(` %c${rest.status}%c`)\n      styles.push(sc, cssColors.reset)\n    } else {\n      parts.push(` ${sc}${rest.status}${colors.reset}`)\n    }\n    delete rest.status\n  }\n\n  if (rest.duration) {\n    if (browser) {\n      parts.push(` %c${escapeFormatString(`in ${rest.duration}`)}%c`)\n      styles.push(cssColors.dim, cssColors.reset)\n    } else {\n      parts.push(` ${colors.dim}in ${rest.duration}${colors.reset}`)\n    }\n    delete rest.duration\n  }\n\n  console.log(parts.join(''), ...styles)\n\n  const aiData = rest.ai as Record<string, unknown> | undefined\n  if (aiData && typeof aiData === 'object') {\n    delete rest.ai\n  }\n\n  const restEntries = Object.entries(rest).filter(([_, v]) => v !== undefined)\n  const aiEntries = aiData ? buildAIEntries(aiData) : []\n  const allEntries: TreeEntry[] = [\n    ...restEntries.map(([key, value]) => ({ key, value: formatValue(value) })),\n    ...aiEntries,\n  ]\n\n  for (let i = 0; i < allEntries.length; i++) {\n    const entry = allEntries[i]!\n    const hasChildren = entry.children && entry.children.length > 0\n    const isLast = i === allEntries.length - 1 && !hasChildren\n    const prefix = isLast ? '└─' : '├─'\n\n    if (browser) {\n      const val = entry.value ? ` ${escapeFormatString(entry.value)}` : ''\n      console.log(`  %c${prefix}%c %c${escapeFormatString(entry.key)}:%c${val}`, cssColors.dim, cssColors.reset, cssColors.cyan, cssColors.reset)\n    } else {\n      const val = entry.value ? ` ${entry.value}` : ''\n      console.log(`  ${colors.dim}${prefix}${colors.reset} ${colors.cyan}${entry.key}:${colors.reset}${val}`)\n    }\n\n    if (hasChildren) {\n      const isLastEntry = i === allEntries.length - 1\n      const connector = isLastEntry ? ' ' : '│'\n      for (let j = 0; j < entry.children!.length; j++) {\n        const child = entry.children![j]!\n        const isLastChild = j === entry.children!.length - 1\n        const childPrefix = isLastChild ? '└─' : '├─'\n        if (browser) {\n          console.log(`  %c${connector}  ${childPrefix}%c ${escapeFormatString(child)}`, cssColors.dim, cssColors.reset)\n        } else {\n          console.log(`  ${colors.dim}${connector}  ${childPrefix}${colors.reset} ${child}`)\n        }\n      }\n    }\n  }\n}\n\nfunction createLogMethod(level: LogLevel) {\n  return function logMethod(tagOrEvent: string | Record<string, unknown>, message?: string): void {\n    if (typeof tagOrEvent === 'string' && message !== undefined) {\n      emitTaggedLog(level, tagOrEvent, message)\n    } else if (typeof tagOrEvent === 'object') {\n      emitWideEvent(level, tagOrEvent)\n    } else {\n      emitTaggedLog(level, 'log', String(tagOrEvent))\n    }\n  }\n}\n\n/**\n * Simple logging API - as easy as console.log\n *\n * @example\n * ```ts\n * log.info('auth', 'User logged in')\n * log.error({ action: 'payment', error: 'failed' })\n * ```\n */\nconst _log: Log = {\n  info: createLogMethod('info'),\n  error: createLogMethod('error'),\n  warn: createLogMethod('warn'),\n  debug: createLogMethod('debug'),\n}\n\nexport { _log as log }\n\nconst noopAudit = Object.assign(() => {}, { deny: () => {} }) as AuditMethod\nconst noopLogger: AuditableLogger = {\n  set() {},\n  error() {},\n  info() {},\n  warn() {},\n  emit() {\n    return null\n  },\n  getContext() {\n    return {}\n  },\n  audit: noopAudit,\n}\n\n/**\n * @internal Options for createLogger that are not part of the public API.\n */\ninterface CreateLoggerInternalOptions {\n  /**\n   * When true, the global drain is skipped on emit.\n   * Used by framework middleware that runs its own enrich+drain pipeline.\n   */\n  _deferDrain?: boolean\n  /**\n   * @see {@link RequestLoggerOptions.waitUntil}\n   */\n  waitUntil?: (promise: Promise<unknown>) => void\n}\n\n/**\n * Create a scoped logger for building wide events.\n * Use this for any context: workflows, jobs, scripts, queues, etc.\n *\n * After `emit()` (including when sampling returns `null`), the logger is sealed and\n * further mutations log `[evlog]` warnings. Standalone loggers do not have `fork`;\n * that method is only attached by supported framework integrations.\n *\n * @example\n * ```ts\n * const log = createLogger({ jobId: job.id, queue: 'emails' })\n * log.set({ batch: { size: 50, processed: 12 } })\n * log.emit()\n * ```\n */\nexport function createLogger<T extends object = Record<string, unknown>>(initialContext: Record<string, unknown> = {}, internalOptions?: CreateLoggerInternalOptions): AuditableLogger<T> {\n  if (!globalEnabled) return noopLogger as unknown as AuditableLogger<T>\n\n  const deferDrain = internalOptions?._deferDrain ?? false\n  const waitUntil = internalOptions?.waitUntil\n  const startTime = Date.now()\n  const context: Record<string, unknown> = { ...initialContext }\n  let hasError = false\n  let hasWarn = false\n  let emitted = false\n\n  function addLog(level: 'info' | 'warn', message: string): void {\n    if (!Array.isArray(context.requestLogs)) {\n      context.requestLogs = []\n    }\n    (context.requestLogs as unknown[]).push({\n      level,\n      message,\n      timestamp: isoNow(),\n    })\n  }\n\n  const auditMethod = function audit(input: AuditInput): void {\n    if (emitted) {\n      warnPostEmit('log.audit()', `Audit dropped: action=${input.action}.`)\n      return\n    }\n    const fields = buildAuditFields(input)\n    if (!isPlainObject(context.audit)) {\n      context.audit = fields as unknown as Record<string, unknown>\n    } else {\n      mergeInto(context.audit as Record<string, unknown>, fields as unknown as Record<string, unknown>)\n    }\n    context._auditForceKeep = true\n  } as AuditMethod<T>\n\n  auditMethod.deny = function deny(reason: string, input: Omit<AuditInput, 'outcome' | 'reason'>): void {\n    auditMethod({ ...input, outcome: 'denied', reason })\n  }\n\n  return {\n    audit: auditMethod,\n    set(data: FieldContext<T>): void {\n      if (emitted) {\n        const keys = Object.keys(data as Record<string, unknown>)\n        warnPostEmit('log.set()', `Keys dropped: ${keys.length ? keys.join(', ') : '(empty)'}.`)\n        return\n      }\n      mergeInto(context, data as Record<string, unknown>)\n    },\n\n    error(error: Error | string, errorContext?: FieldContext<T>): void {\n      if (emitted) {\n        const keys = errorContext\n          ? [...Object.keys(errorContext as Record<string, unknown>), 'error']\n          : ['error']\n        warnPostEmit('log.error()', `Keys dropped: ${keys.join(', ')}.`)\n        return\n      }\n      hasError = true\n      const err = typeof error === 'string' ? new Error(error) : error\n\n      if (errorContext) {\n        mergeInto(context, errorContext as Record<string, unknown>)\n      }\n\n      const errorObj: Record<string, unknown> = {\n        name: err.name,\n        message: err.message,\n        stack: err.stack,\n      }\n      const errRecord = err as unknown as Record<string, unknown>\n      for (const k of ['status', 'statusText', 'statusCode', 'statusMessage', 'data', 'cause', 'internal'] as const) {\n        if (k in err) errorObj[k] = errRecord[k]\n      }\n\n      if (isPlainObject(context.error)) {\n        mergeInto(context.error as Record<string, unknown>, errorObj)\n      } else {\n        context.error = errorObj\n      }\n    },\n\n    info(message: string, infoContext?: FieldContext<T>): void {\n      if (emitted) {\n        const keys = infoContext\n          ? ['message', ...Object.keys(infoContext as Record<string, unknown>).filter(k => k !== 'requestLogs')]\n          : ['message']\n        warnPostEmit('log.info()', `Keys dropped: ${keys.join(', ')}.`)\n        return\n      }\n      addLog('info', message)\n      if (infoContext) {\n        const { requestLogs: _, ...rest } = infoContext as Record<string, unknown>\n        mergeInto(context, rest)\n      }\n    },\n\n    warn(message: string, warnContext?: FieldContext<T>): void {\n      if (emitted) {\n        const keys = warnContext\n          ? ['message', ...Object.keys(warnContext as Record<string, unknown>).filter(k => k !== 'requestLogs')]\n          : ['message']\n        warnPostEmit('log.warn()', `Keys dropped: ${keys.join(', ')}.`)\n        return\n      }\n      hasWarn = true\n      addLog('warn', message)\n      if (warnContext) {\n        const { requestLogs: _, ...rest } = warnContext as Record<string, unknown>\n        mergeInto(context, rest)\n      }\n    },\n\n    emit(overrides?: FieldContext<T> & { _forceKeep?: boolean }): WideEvent | null {\n      if (emitted) {\n        warnPostEmit('log.emit()', 'Ignoring duplicate emit.')\n        return null\n      }\n\n      const durationMs = Date.now() - startTime\n      const level: LogLevel = hasError ? 'error' : hasWarn ? 'warn' : 'info'\n\n      let forceKeep = false\n      if (overrides?._forceKeep) {\n        forceKeep = true\n      } else if (consumeAuditForceKeep(context)) {\n        forceKeep = true\n      } else if (globalSampling.keep?.length) {\n        const status = (overrides as Record<string, unknown> | undefined)?.status ?? context.status\n        forceKeep = shouldKeep({\n          status: status as number | undefined,\n          duration: durationMs,\n          path: context.path as string | undefined,\n          method: context.method as string | undefined,\n          context,\n        })\n      }\n\n      if (!forceKeep && !shouldSample(level)) {\n        emitted = true\n        return null\n      }\n\n      if (overrides) {\n        const obj = overrides as Record<string, unknown>\n        for (const key in obj) {\n          if (key !== '_forceKeep') context[key] = obj[key]\n        }\n      }\n      context.duration = formatDuration(durationMs)\n\n      const wide = emitWideEvent(level, context, { deferDrain, ownsEvent: true, waitUntil })\n      emitted = true\n      return wide\n    },\n\n    getContext(): FieldContext<T> & Record<string, unknown> {\n      return { ...context } as FieldContext<T> & Record<string, unknown>\n    },\n  }\n}\n\n/**\n * Create a request-scoped logger for building wide events.\n * Convenience wrapper around `createLogger` that pre-populates HTTP request fields.\n *\n * @example\n * ```ts\n * const log = createRequestLogger({ method: 'POST', path: '/checkout' })\n * log.set({ user: { id: '123' } })\n * log.set({ cart: { items: 3 } })\n * log.emit()\n * ```\n *\n * @example Cloudflare Workers — pass `waitUntil` so `initLogger({ drain })` completes after the response:\n * ```ts\n * export default {\n *   async fetch(request, env, ctx) {\n *     const log = createRequestLogger({\n *       method: request.method,\n *       path: new URL(request.url).pathname,\n *       waitUntil: ctx.waitUntil.bind(ctx),\n *     })\n *     log.emit()\n *     return new Response('ok')\n *   },\n * }\n * ```\n */\nexport function createRequestLogger<T extends object = Record<string, unknown>>(options: RequestLoggerOptions = {}, internalOptions?: CreateLoggerInternalOptions): AuditableLogger<T> {\n  const { method, path, requestId, waitUntil: optionsWaitUntil } = options\n  const initial: Record<string, unknown> = {}\n  if (method !== undefined) initial.method = method\n  if (path !== undefined) initial.path = path\n  if (requestId !== undefined) initial.requestId = requestId\n  return createLogger<T>(initial, {\n    ...internalOptions,\n    waitUntil: internalOptions?.waitUntil ?? optionsWaitUntil,\n  })\n}\n\n/**\n * Get the current environment context.\n */\nexport function getEnvironment(): EnvironmentContext {\n  return { ...globalEnv }\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention\ndeclare const __EVLOG_CONFIG__: import('./types').LoggerConfig | undefined\n\nif (typeof __EVLOG_CONFIG__ !== 'undefined') initLogger(__EVLOG_CONFIG__)\n","import type { AuditActor, AuditFields, AuditTarget, DrainContext, EnrichContext, FieldContext, RedactConfig, RequestLogger, WideEvent } from './types'\nimport { createLogger } from './logger'\nimport { getHeader as getSharedHeader } from './shared/headers'\n\n/**\n * Current version of the audit envelope. Bumped when `AuditFields` evolves\n * in a backward-incompatible way so downstream pipelines can branch on it.\n */\nexport const AUDIT_SCHEMA_VERSION = 1\n\n/**\n * Input accepted by `log.audit()`, `audit()`, and `withAudit()`.\n *\n * `outcome` defaults to `'success'`. Internal fields populated by the audit\n * pipeline (`idempotencyKey`, `context`, `signature`, `prevHash`, `hash`) are\n * stripped — pass them through `log.set({ audit })` if you really need to.\n */\nexport interface AuditInput {\n  action: string\n  actor: AuditActor\n  target?: AuditTarget\n  outcome?: AuditFields['outcome']\n  reason?: string\n  changes?: AuditFields['changes']\n  causationId?: string\n  correlationId?: string\n  version?: number\n}\n\n/**\n * @internal Stable JSON stringification with deterministic key order.\n * Used by `idempotencyKey` and `hash-chain` so the same logical event always\n * produces the same digest, regardless of how object keys were added.\n */\nfunction stableStringify(value: unknown): string {\n  if (value === null || typeof value !== 'object') return JSON.stringify(value)\n  if (Array.isArray(value)) return `[${value.map(stableStringify).join(',')}]`\n  const keys = Object.keys(value as Record<string, unknown>).sort()\n  return `{${keys.map(k => `${JSON.stringify(k)}:${stableStringify((value as Record<string, unknown>)[k])}`).join(',')}}`\n}\n\n/**\n * @internal Sync, isomorphic 32-bit FNV-1a. Used to derive the idempotency\n * key without pulling `node:crypto` into the static import graph (which would\n * break browser / Cloudflare Workers bundles that import `evlog` for types\n * or shared utilities). Idempotency keys are dedup tokens, not security\n * primitives — collision resistance at 128 bits is more than sufficient.\n */\nfunction fnv1a32(input: string, seed: number): number {\n  let h = seed >>> 0\n  for (let i = 0; i < input.length; i++) {\n    h ^= input.charCodeAt(i) & 0xff\n    h = Math.imul(h, 0x01000193) >>> 0\n  }\n  return h >>> 0\n}\n\n/**\n * @internal Compute the deterministic idempotency key for an audit event.\n * Includes `action`, `actor.{type,id}`, `target.{type,id}`, `outcome`, and\n * `timestamp` rounded to the second so retries within the same second collapse.\n *\n * Uses four interleaved FNV-1a 32-bit hashes (128-bit output, 32 hex chars)\n * so the implementation stays sync and isomorphic across Node, browsers,\n * Bun, Deno, and Cloudflare Workers.\n */\nfunction computeIdempotencyKey(audit: AuditFields, timestamp: string): string {\n  const seconds = timestamp.slice(0, 19)\n  const payload = stableStringify({\n    action: audit.action,\n    actor: { type: audit.actor.type, id: audit.actor.id },\n    target: audit.target ? { type: audit.target.type, id: audit.target.id } : undefined,\n    outcome: audit.outcome,\n    timestamp: seconds,\n  })\n  const a = fnv1a32(payload, 0x811c9dc5).toString(16).padStart(8, '0')\n  const b = fnv1a32(payload, 0xdeadbeef).toString(16).padStart(8, '0')\n  const c = fnv1a32(payload, 0x1f83d9ab).toString(16).padStart(8, '0')\n  const d = fnv1a32(payload, 0x5be0cd19).toString(16).padStart(8, '0')\n  return a + b + c + d\n}\n\n/**\n * Build a normalised {@link AuditFields} from caller input. Defaults:\n * - `outcome` → `'success'`\n * - `version` → {@link AUDIT_SCHEMA_VERSION}\n *\n * `idempotencyKey` is filled at emit time with the event timestamp so retries\n * stay deterministic.\n */\nexport function buildAuditFields(input: AuditInput): AuditFields {\n  return {\n    action: input.action,\n    actor: input.actor,\n    target: input.target,\n    outcome: input.outcome ?? 'success',\n    reason: input.reason,\n    changes: input.changes,\n    causationId: input.causationId,\n    correlationId: input.correlationId,\n    version: input.version ?? AUDIT_SCHEMA_VERSION,\n  }\n}\n\n/**\n * @internal Test-collector hook installed by {@link mockAudit}. When set, every\n * audit event flowing through `log.audit()` / `audit()` is also pushed to it.\n */\nlet _testCollector: ((event: AuditFields, wide: WideEvent | null) => void) | null = null\n\n/** @internal Emit-time decoration: assign timestamp-based idempotency key. */\nfunction decorateAudit(audit: AuditFields, timestamp: string): AuditFields {\n  if (audit.idempotencyKey) return audit\n  return { ...audit, idempotencyKey: computeIdempotencyKey(audit, timestamp) }\n}\n\n/**\n * Add audit semantics to an existing {@link RequestLogger}.\n *\n * Mutates the logger in place by adding an `audit` method (with a `.deny()`\n * sub-method). Strictly equivalent to calling `log.set({ audit: ... })` plus\n * `_forceKeep` on emit. Idempotent: calling twice on the same logger only\n * attaches the methods once.\n *\n * @example\n * ```ts\n * const log = withAuditMethods(createLogger())\n * log.audit({\n *   action: 'invoice.refund',\n *   actor: { type: 'user', id: user.id },\n *   target: { type: 'invoice', id: 'inv_889' },\n * })\n * ```\n */\nexport function withAuditMethods<T extends object = Record<string, unknown>>(logger: RequestLogger<T>): AuditableLogger<T> {\n  const target = logger as AuditableLogger<T>\n  if (target.audit) return target\n\n  const audit = function audit(input: AuditInput): void {\n    const fields = buildAuditFields(input)\n    target.set({ audit: fields } as unknown as FieldContext<T>)\n    markForceKeep(target)\n  } as AuditMethod<T>\n\n  audit.deny = function deny(reason: string, input: Omit<AuditInput, 'outcome' | 'reason'>): void {\n    audit({ ...input, outcome: 'denied', reason })\n  }\n\n  target.audit = audit\n  return target\n}\n\n/**\n * @internal Mark a logger so its next `emit()` is force-kept past tail sampling.\n * Implemented by stamping a hidden flag on the accumulated context which\n * `emit()` reads via `_forceKeep`.\n */\nfunction markForceKeep<T extends object>(logger: RequestLogger<T>): void {\n  const ctx = logger.getContext() as Record<string, unknown>\n  ctx._auditForceKeep = true\n}\n\n/**\n * Logger augmented with `.audit()` / `.audit.deny()` helpers.\n */\nexport type AuditableLogger<T extends object = Record<string, unknown>> = RequestLogger<T> & { audit: AuditMethod<T> }\n\n/** Method shape attached to {@link AuditableLogger}. */\nexport interface AuditMethod<T extends object = Record<string, unknown>> {\n  (input: AuditInput): void\n  /**\n   * Record an AuthZ-denied action. Forces `outcome: 'denied'` and requires\n   * a human-readable `reason`. Most teams forget to log denials — they are\n   * exactly what auditors and security teams ask for.\n   */\n  deny: (reason: string, input: Omit<AuditInput, 'outcome' | 'reason'>) => void\n}\n\n/**\n * Standalone audit emitter for non-request contexts (jobs, scripts, CLIs).\n *\n * Creates a one-shot logger, sets the audit fields, and emits immediately.\n * The event is force-kept past tail sampling. Returns the emitted wide event,\n * or `null` if logging is globally disabled.\n *\n * @example\n * ```ts\n * import { audit } from 'evlog'\n *\n * audit({\n *   action: 'cron.cleanup',\n *   actor: { type: 'system', id: 'cron' },\n *   target: { type: 'job', id: 'cleanup-stale-sessions' },\n *   outcome: 'success',\n * })\n * ```\n */\nexport function audit(input: AuditInput): WideEvent | null {\n  const fields = buildAuditFields(input)\n  const logger = createLogger({ audit: fields })\n  const wide = logger.emit({ _forceKeep: true } as FieldContext<Record<string, unknown>> & { _forceKeep?: boolean })\n  _testCollector?.(fields, wide)\n  return wide\n}\n\n/**\n * Wrap a function so its outcome (success / failure / denied) is automatically\n * audited.\n *\n * Behaviour:\n * - If `fn` resolves, an audit event with `outcome: 'success'` is emitted.\n * - If `fn` throws an `EvlogError` (or any error) with `status === 403`, the\n *   audit event is recorded as `'denied'` with the error message as `reason`.\n * - Any other thrown error produces `outcome: 'failure'` and re-throws.\n *\n * Use {@link AuditDeniedError} to signal denial without an HTTP status.\n *\n * @example\n * ```ts\n * const refundInvoice = withAudit(\n *   { action: 'invoice.refund', target: (input) => ({ type: 'invoice', id: input.id }) },\n *   async (input: { id: string }, ctx: { actor: AuditActor }) => {\n *     await db.invoices.refund(input.id)\n *   }\n * )\n *\n * await refundInvoice({ id: 'inv_889' }, { actor: { type: 'user', id: user.id } })\n * ```\n */\nexport function withAudit<TInput, TOutput>(\n  options: WithAuditOptions<TInput>,\n  fn: (input: TInput, ctx: WithAuditContext) => Promise<TOutput> | TOutput,\n): (input: TInput, ctx: WithAuditContext) => Promise<TOutput> {\n  return async (input, ctx) => {\n    const target = typeof options.target === 'function' ? options.target(input) : options.target\n    try {\n      const result = await fn(input, ctx)\n      audit({\n        action: options.action,\n        actor: ctx.actor,\n        target,\n        outcome: 'success',\n        causationId: ctx.causationId,\n        correlationId: ctx.correlationId,\n      })\n      return result\n    } catch (err) {\n      const error = err as Error & { status?: number; statusCode?: number }\n      const status = error.status ?? error.statusCode\n      const denied = err instanceof AuditDeniedError || status === 403\n      audit({\n        action: options.action,\n        actor: ctx.actor,\n        target,\n        outcome: denied ? 'denied' : 'failure',\n        reason: error.message,\n        causationId: ctx.causationId,\n        correlationId: ctx.correlationId,\n      })\n      throw err\n    }\n  }\n}\n\n/**\n * Throw inside a {@link withAudit} body to mark the action as `outcome: 'denied'`\n * regardless of the underlying HTTP status. The constructor message becomes the\n * audit `reason`.\n */\nexport class AuditDeniedError extends Error {\n\n  constructor(reason: string) {\n    super(reason)\n    this.name = 'AuditDeniedError'\n  }\n\n}\n\n/** Options for {@link withAudit}. `target` may be derived from the input. */\nexport interface WithAuditOptions<TInput> {\n  action: string\n  target?: AuditTarget | ((input: TInput) => AuditTarget | undefined)\n}\n\n/**\n * Runtime context required by a {@link withAudit}-wrapped function.\n * The actor is always required; correlation IDs are optional.\n */\nexport interface WithAuditContext {\n  actor: AuditActor\n  causationId?: string\n  correlationId?: string\n}\n\n/**\n * Compute a compact, redact-aware diff between two objects for the\n * `changes` field. Output is a JSON Patch-style array (RFC 6902 subset:\n * `add`, `remove`, `replace`) — small enough to ship over the wire.\n *\n * Object keys whose name matches one of the `redactPaths` (dot-notation, e.g.\n * `'user.password'`, `'card.cvv'`) are replaced with `'[REDACTED]'` so PII\n * never leaks through the diff.\n *\n * @example\n * ```ts\n * log.audit({\n *   action: 'user.update',\n *   actor: { type: 'user', id: user.id },\n *   target: { type: 'user', id: 'usr_42' },\n *   changes: auditDiff(before, after, { redactPaths: ['password'] }),\n * })\n * ```\n */\nexport function auditDiff(\n  before: unknown,\n  after: unknown,\n  options: AuditDiffOptions = {},\n): { before?: unknown, after?: unknown, patch: AuditPatchOp[] } {\n  const replacement = options.replacement ?? '[REDACTED]'\n  const redactSet = new Set((options.redactPaths ?? []).map(p => p))\n  const patch: AuditPatchOp[] = []\n\n  function isRedacted(path: string): boolean {\n    if (redactSet.size === 0) return false\n    if (redactSet.has(path)) return true\n    for (const p of redactSet) {\n      if (path.endsWith(`.${p}`)) return true\n    }\n    return false\n  }\n\n  function diff(a: unknown, b: unknown, path: string): void {\n    if (a === b) return\n\n    if (a === undefined && b !== undefined) {\n      patch.push({ op: 'add', path: path || '/', value: redactValue(b, path) })\n      return\n    }\n    if (a !== undefined && b === undefined) {\n      patch.push({ op: 'remove', path: path || '/' })\n      return\n    }\n\n    if (\n      a !== null && b !== null\n      && typeof a === 'object' && typeof b === 'object'\n      && !Array.isArray(a) && !Array.isArray(b)\n    ) {\n      const keys = new Set([...Object.keys(a as object), ...Object.keys(b as object)])\n      for (const key of keys) {\n        diff((a as Record<string, unknown>)[key], (b as Record<string, unknown>)[key], `${path}/${key}`)\n      }\n      return\n    }\n\n    patch.push({ op: 'replace', path: path || '/', value: redactValue(b, path) })\n  }\n\n  function redactValue(value: unknown, path: string): unknown {\n    if (value === null || typeof value !== 'object') {\n      const segs = path.split('/').filter(Boolean)\n      const last = segs[segs.length - 1]\n      if (last && isRedacted(last)) return replacement\n      return value\n    }\n    if (Array.isArray(value)) {\n      return value.map((v, i) => redactValue(v, `${path}/${i}`))\n    }\n    const out: Record<string, unknown> = {}\n    for (const [k, v] of Object.entries(value as Record<string, unknown>)) {\n      out[k] = isRedacted(k) ? replacement : redactValue(v, `${path}/${k}`)\n    }\n    return out\n  }\n\n  diff(before, after, '')\n  const result: { before?: unknown, after?: unknown, patch: AuditPatchOp[] } = { patch }\n  if (options.includeBefore) result.before = redactValue(before, '')\n  if (options.includeAfter) result.after = redactValue(after, '')\n  return result\n}\n\n/** Single JSON Patch operation produced by {@link auditDiff}. */\nexport interface AuditPatchOp {\n  op: 'add' | 'remove' | 'replace'\n  path: string\n  value?: unknown\n}\n\n/** Options for {@link auditDiff}. */\nexport interface AuditDiffOptions {\n  /** Object keys (dot-notation) whose values should be replaced with `[REDACTED]`. */\n  redactPaths?: string[]\n  /** Custom replacement string. @default '[REDACTED]' */\n  replacement?: string\n  /** Include the full redacted `before` snapshot alongside the patch. */\n  includeBefore?: boolean\n  /** Include the full redacted `after` snapshot alongside the patch. */\n  includeAfter?: boolean\n}\n\n/**\n * Define a typed audit action with an optional fixed target type.\n *\n * Returns a curried helper that fills in the action name (and target shape\n * if provided) so call sites stay terse and the action set is discoverable\n * in one place.\n *\n * @example\n * ```ts\n * const refund = defineAuditAction('invoice.refund', { target: 'invoice' })\n *\n * log.audit(refund({\n *   actor: { type: 'user', id: user.id },\n *   target: { id: 'inv_889' }, // type inferred as 'invoice'\n *   outcome: 'success',\n * }))\n * ```\n */\nexport function defineAuditAction<TTargetType extends string | undefined = undefined>(\n  action: string,\n  options?: { target?: TTargetType },\n): DefinedAuditAction<TTargetType> {\n  const targetType = options?.target\n  return (input) => {\n    const merged: AuditInput = {\n      ...input,\n      action,\n    }\n    if (targetType && input.target && !input.target.type) {\n      merged.target = { ...input.target, type: targetType }\n    }\n    return merged\n  }\n}\n\n/**\n * Return type of {@link defineAuditAction}. Accepts a partial input (no\n * `action`, target type pre-filled when provided).\n */\nexport type DefinedAuditAction<TTargetType extends string | undefined> = (\n  input: TTargetType extends string\n    ? Omit<AuditInput, 'action' | 'target'> & { target?: Omit<AuditTarget, 'type'> & { type?: TTargetType } }\n    : Omit<AuditInput, 'action'>,\n) => AuditInput\n\n/**\n * Test helper that captures every audit event emitted while it is active.\n *\n * Returns `{ events, restore, expect }`:\n * - `events` — live array of captured `AuditFields`, populated as audits fire.\n * - `restore()` — uninstall the collector. Call from `afterEach()`.\n * - `expect.toIncludeAuditOf(matcher)` — assertion helper used inside `expect`\n *   blocks, returns `true` if at least one captured event matches.\n *\n * Only captures audits going through `log.audit()` and the standalone\n * `audit()` function. Events emitted via raw `log.set({ audit })` skip the\n * collector by design — wrap them with `log.audit()` to make them visible to\n * tests.\n *\n * @example\n * ```ts\n * const captured = mockAudit()\n * await refundInvoice('inv_889')\n * expect(captured.events).toHaveLength(1)\n * expect(captured.toIncludeAuditOf({ action: 'invoice.refund' })).toBe(true)\n * captured.restore()\n * ```\n */\nexport function mockAudit(): MockAudit {\n  const events: AuditFields[] = []\n  const previous = _testCollector\n  _testCollector = (event) => {\n    events.push(event)\n  }\n\n  return {\n    events,\n    restore() {\n      _testCollector = previous\n    },\n    toIncludeAuditOf(matcher) {\n      return events.some(event => matchesAudit(event, matcher))\n    },\n  }\n}\n\n/** Result of {@link mockAudit}. */\nexport interface MockAudit {\n  events: AuditFields[]\n  restore: () => void\n  toIncludeAuditOf: (matcher: AuditMatcher) => boolean\n}\n\n/** Partial structural matcher for {@link MockAudit.toIncludeAuditOf}. */\nexport interface AuditMatcher {\n  action?: string | RegExp\n  outcome?: AuditFields['outcome']\n  actor?: Partial<AuditActor>\n  target?: Partial<AuditTarget>\n}\n\nfunction matchesAudit(event: AuditFields, matcher: AuditMatcher): boolean {\n  if (matcher.action !== undefined) {\n    if (matcher.action instanceof RegExp) {\n      if (!matcher.action.test(event.action)) return false\n    } else if (event.action !== matcher.action) {\n      return false\n    }\n  }\n  if (matcher.outcome !== undefined && event.outcome !== matcher.outcome) return false\n  if (matcher.actor) {\n    for (const [k, v] of Object.entries(matcher.actor)) {\n      if ((event.actor as Record<string, unknown>)[k] !== v) return false\n    }\n  }\n  if (matcher.target) {\n    if (!event.target) return false\n    for (const [k, v] of Object.entries(matcher.target)) {\n      if ((event.target as Record<string, unknown>)[k] !== v) return false\n    }\n  }\n  return true\n}\n\n/**\n * @internal Hook used by `RequestLogger.emit()` to detect audit-driven\n * force-keep flags on the accumulated context. Returns whether the event was\n * marked by `log.audit()` and clears the flag.\n */\nexport function consumeAuditForceKeep(context: Record<string, unknown>): boolean {\n  if (context._auditForceKeep) {\n    delete context._auditForceKeep\n    return true\n  }\n  if (context.audit) return true\n  return false\n}\n\n/**\n * @internal Decorate the audit field on an event right before drain — fills\n * in the deterministic idempotency key. Called by the logger pipeline so\n * it works for both `log.audit()` and direct `log.set({ audit })` paths.\n */\nexport function finalizeAudit(event: WideEvent): void {\n  const a = event.audit as AuditFields | undefined\n  if (!a) return\n  const decorated = decorateAudit(a, String(event.timestamp))\n  event.audit = decorated\n}\n\n/** Shape of the optional better-auth bridge for the audit enricher. */\nexport interface AuditEnricherBetterAuthBridge {\n  /** Read the current authenticated session for this request, if any. */\n  getSession: (ctx: EnrichContext) => Promise<AuditActor | null | undefined> | AuditActor | null | undefined\n}\n\n/** Options for {@link auditEnricher}. */\nexport interface AuditEnricherOptions {\n  /**\n   * Resolve the tenant id for the current request. The result is stored at\n   * `event.audit.context.tenantId`. Multi-tenant SaaS gets isolation by default.\n   */\n  tenantId?: (ctx: EnrichContext) => string | undefined\n  /**\n   * Bridge to populate `event.audit.actor` from the authenticated session.\n   * Only used when the application has not already filled `actor`.\n   */\n  bridge?: AuditEnricherBetterAuthBridge\n  /** When true, overwrite existing context fields. @default false */\n  overwrite?: boolean\n}\n\n/**\n * Enrich audit-bearing wide events with request, runtime, and tenant context.\n *\n * Runs only when `event.audit` is present — every other event passes through\n * untouched. Populates:\n * - `event.audit.context.requestId` from `ctx.request.requestId`\n * - `event.audit.context.traceId`   from `event.traceId`\n * - `event.audit.context.ip`        from `x-forwarded-for` / `x-real-ip`\n * - `event.audit.context.userAgent` from `user-agent`\n * - `event.audit.context.tenantId`  from `options.tenantId(ctx)`\n *\n * Optionally fills `event.audit.actor` from the better-auth bridge when the\n * caller did not provide one. Anything else (custom actor strategies,\n * extra context) belongs in a custom enricher — replace this one entirely.\n */\nexport function auditEnricher(options: AuditEnricherOptions = {}): (ctx: EnrichContext) => void | Promise<void> {\n  return async (ctx) => {\n    const event = ctx.event as WideEvent & { audit?: AuditFields }\n    const a = event.audit\n    if (!a) return\n\n    const context = { ...(a.context ?? {}) }\n\n    function setIfMissing(key: string, value: string | undefined): void {\n      if (value === undefined) return\n      if (options.overwrite || context[key] === undefined) context[key] = value\n    }\n\n    setIfMissing('requestId', ctx.request?.requestId)\n    setIfMissing('traceId', typeof event.traceId === 'string' ? event.traceId : undefined)\n    setIfMissing('ip', getHeader(ctx.headers, 'x-forwarded-for')?.split(',')[0]?.trim() ?? getHeader(ctx.headers, 'x-real-ip'))\n    setIfMissing('userAgent', getHeader(ctx.headers, 'user-agent'))\n\n    if (options.tenantId) {\n      const tid = options.tenantId(ctx)\n      if (tid !== undefined) setIfMissing('tenantId', tid)\n    }\n\n    let { actor } = a\n    if (!actor && options.bridge) {\n      const fromBridge = await options.bridge.getSession(ctx)\n      if (fromBridge) actor = fromBridge\n    }\n\n    event.audit = { ...a, context, actor: actor ?? a.actor }\n  }\n}\n\n// Re-imported here to avoid changing the long list of named imports at the top\n// of this file; identical semantics to `getHeader` exported from `evlog/toolkit`.\nfunction getHeader(headers: Record<string, string> | undefined, name: string): string | undefined {\n  return getSharedHeader(headers, name)\n}\n\n/** Options accepted by {@link auditOnly}. */\nexport interface AuditOnlyOptions {\n  /**\n   * When true, the wrapper awaits the wrapped drain so the event is flushed\n   * before the request resolves. Use for crash-safe audit storage.\n   * @default false\n   */\n  await?: boolean\n}\n\n/** Drain function signature accepted by all wrappers. Matches `LoggerConfig['drain']`. */\nexport type DrainFn = (ctx: DrainContext) => void | Promise<void>\n\n/**\n * Wrap any drain so it only receives events that carry an `audit` field.\n *\n * Use to route audit events to dedicated storage (separate Axiom dataset,\n * append-only Postgres table, FS journal) without affecting your main drain.\n *\n * Per-sink failure isolation comes from `initLogger({ drain: [...] })`: each\n * drain in the array is invoked independently, so a crashed Axiom call never\n * blocks the FS audit drain.\n *\n * @example\n * ```ts\n * import { initLogger, auditOnly } from 'evlog'\n * import { createAxiomDrain } from 'evlog/axiom'\n * import { createFsDrain } from 'evlog/fs'\n *\n * initLogger({\n *   drain: [\n *     createAxiomDrain({ dataset: 'logs' }),\n *     auditOnly(createFsDrain({ dir: '.audit' }), { await: true }),\n *   ],\n * })\n * ```\n */\nexport function auditOnly(drain: DrainFn, options: AuditOnlyOptions = {}): DrainFn {\n  return async (ctx) => {\n    if (!ctx.event.audit) return\n    if (options.await) {\n      await drain(ctx)\n      return\n    }\n    drain(ctx)\n  }\n}\n\n/** Pluggable persistence for the hash-chain state. */\nexport interface SignedChainState {\n  /** Load the previous hash from durable storage, or `null` on first run. */\n  load: () => Promise<string | null> | string | null\n  /** Persist the latest hash so the chain survives process restarts. */\n  save: (hash: string) => Promise<void> | void\n}\n\n/** Options for {@link signed}. Pick a strategy at construction time. */\nexport type SignedOptions =\n  | { strategy: 'hmac', secret: string, algorithm?: 'sha256' | 'sha512' }\n  | { strategy: 'hash-chain', state?: SignedChainState, algorithm?: 'sha256' | 'sha512' }\n\n/**\n * Wrap a drain so every event passing through gains tamper-evident integrity.\n *\n * - `'hmac'` — adds `event.audit.signature` (HMAC of the canonical event).\n * - `'hash-chain'` — adds `event.audit.prevHash` and `event.audit.hash` so the\n *   sequence of events forms a verifiable chain. State persists in memory\n *   by default; pass a `state: { load, save }` for cross-process / durable\n *   chains (Redis, file, Postgres).\n *\n * The signature is computed before the event is forwarded to the wrapped\n * drain — combine with {@link auditOnly} when you only want integrity for\n * audit events.\n *\n * @example\n * ```ts\n * import { initLogger, auditOnly, signed } from 'evlog'\n * import { createFsDrain } from 'evlog/fs'\n *\n * initLogger({\n *   drain: auditOnly(\n *     signed(createFsDrain({ dir: '.audit' }), { strategy: 'hash-chain' }),\n *     { await: true },\n *   ),\n * })\n * ```\n */\nexport function signed(drain: DrainFn, options: SignedOptions): DrainFn {\n  if (options.strategy === 'hmac') {\n    const algorithm = options.algorithm ?? 'sha256'\n    const { secret } = options\n    return async (ctx) => {\n      const a = ctx.event.audit as AuditFields | undefined\n      if (a) {\n        const payload = stableStringify(stripIntegrity(ctx.event))\n        const signature = await hmacHex(algorithm, secret, payload)\n        ctx.event.audit = { ...a, signature }\n      }\n      await drain(ctx)\n    }\n  }\n\n  const algorithm = options.algorithm ?? 'sha256'\n  const { state } = options\n  let inMemoryPrev: string | null = null\n  let initialised = !state\n  let queue: Promise<void> = Promise.resolve()\n\n  return (ctx) => {\n    queue = queue.then(async () => {\n      const a = ctx.event.audit as AuditFields | undefined\n      if (a) {\n        if (!initialised && state) {\n          inMemoryPrev = (await state.load()) ?? null\n          initialised = true\n        }\n        const prevHash = inMemoryPrev ?? undefined\n        const payload = stableStringify({ ...stripIntegrity(ctx.event), audit: { ...stripIntegrity(ctx.event).audit, prevHash } })\n        const hash = await digestHex(algorithm, payload)\n        ctx.event.audit = { ...a, prevHash, hash }\n        inMemoryPrev = hash\n        await state?.save(hash)\n      }\n      await drain(ctx)\n    }).catch((err) => {\n      console.error('[evlog/audit] signed drain failed:', err)\n    })\n    return queue\n  }\n}\n\n/**\n * @internal Resolve the Web Crypto SubtleCrypto interface. Available natively\n * in browsers, Node 19+, Bun, Deno, and Cloudflare Workers. Falls back to\n * Node's `webcrypto` for Node 18 (where `globalThis.crypto` is gated behind\n * a flag). The dynamic import keeps `node:crypto` out of browser bundles.\n */\nasync function getSubtle(): Promise<SubtleCrypto> {\n  const c = (globalThis as { crypto?: { subtle?: SubtleCrypto } }).crypto\n  if (c?.subtle) return c.subtle\n  const mod = await import(/* @vite-ignore */ 'node:crypto') as { webcrypto: { subtle: SubtleCrypto } }\n  return mod.webcrypto.subtle\n}\n\nfunction normalizeAlgo(algorithm: string): string {\n  switch (algorithm.toLowerCase()) {\n    case 'sha1':\n    case 'sha-1':\n      return 'SHA-1'\n    case 'sha256':\n    case 'sha-256':\n      return 'SHA-256'\n    case 'sha384':\n    case 'sha-384':\n      return 'SHA-384'\n    case 'sha512':\n    case 'sha-512':\n      return 'SHA-512'\n    default:\n      return 'SHA-256'\n  }\n}\n\nfunction bufToHex(buf: ArrayBuffer): string {\n  let out = ''\n  for (const byte of new Uint8Array(buf)) out += byte.toString(16).padStart(2, '0')\n  return out\n}\n\nasync function digestHex(algorithm: string, data: string): Promise<string> {\n  const subtle = await getSubtle()\n  const buf = await subtle.digest(normalizeAlgo(algorithm), new TextEncoder().encode(data))\n  return bufToHex(buf)\n}\n\nasync function hmacHex(algorithm: string, secret: string, data: string): Promise<string> {\n  const subtle = await getSubtle()\n  const hash = normalizeAlgo(algorithm)\n  const key = await subtle.importKey('raw', new TextEncoder().encode(secret), { name: 'HMAC', hash }, false, ['sign'])\n  const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(data))\n  return bufToHex(sig)\n}\n\n/** @internal Strip integrity fields before hashing so signatures stay stable. */\nfunction stripIntegrity(event: WideEvent): WideEvent {\n  const a = event.audit as AuditFields | undefined\n  if (!a) return event\n  const { signature, prevHash, hash, ...rest } = a\n  return { ...event, audit: rest as AuditFields }\n}\n\n/**\n * Strict redact preset for audit events.\n *\n * Combine with the user's existing redact configuration via spread:\n * `initLogger({ redact: { paths: [...auditRedactPreset.paths!, ...mine] } })`.\n *\n * Hardens PII handling:\n * - Drops `Authorization` and `Cookie` headers anywhere they appear.\n * - Drops common credential field names (`password`, `passwordHash`, `token`,\n *   `apiKey`, `secret`, `accessToken`, `refreshToken`, `cardNumber`, `cvv`,\n *   `ssn`).\n *\n * Built-in pattern maskers (email, credit card, …) keep their default\n * behaviour — partial masking, not full redaction — so audit trails retain\n * enough signal to be useful.\n */\nexport const auditRedactPreset: RedactConfig = {\n  paths: [\n    'audit.changes.before.password',\n    'audit.changes.before.passwordHash',\n    'audit.changes.before.token',\n    'audit.changes.before.apiKey',\n    'audit.changes.before.secret',\n    'audit.changes.before.accessToken',\n    'audit.changes.before.refreshToken',\n    'audit.changes.before.cardNumber',\n    'audit.changes.before.cvv',\n    'audit.changes.before.ssn',\n    'audit.changes.after.password',\n    'audit.changes.after.passwordHash',\n    'audit.changes.after.token',\n    'audit.changes.after.apiKey',\n    'audit.changes.after.secret',\n    'audit.changes.after.accessToken',\n    'audit.changes.after.refreshToken',\n    'audit.changes.after.cardNumber',\n    'audit.changes.after.cvv',\n    'audit.changes.after.ssn',\n    'headers.authorization',\n    'headers.cookie',\n    'headers.set-cookie',\n    'audit.context.headers.authorization',\n    'audit.context.headers.cookie',\n  ],\n}\n"],"mappings":";;;AAEA,MAAM,sBAAsB;;;;;AAQ5B,MAAa,kBAAkB;;CAE7B,YAAY;EACV,SAAS;EACT,OAAO,MAAc,OAAO,EAAE,QAAQ,UAAU,GAAG,CAAC,MAAM,GAAG;EAC9D;;CAED,OAAO;EACL,SAAS;EACT,OAAO,MAAc;AAEnB,OADW,EAAE,QAAQ,IACf,GAAG,EAAG,QAAO;GACnB,MAAM,MAAM,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC;AACvC,UAAO,GAAG,EAAE,GAAG,SAAS;;EAE3B;;CAED,MAAM;EACJ,SAAS;EACT,OAAO,MAAc,eAAe,EAAE,MAAM,IAAI,CAAC,KAAK;EACvD;;;;;;;;;;CAUD,OAAO;EACL,SAAS;EACT,OAAO,MAAc;GACnB,MAAM,SAAS,EAAE,QAAQ,UAAU,GAAG;AAEtC,OADgB,EAAE,WAAW,IAClB,IAAI,OAAO,SAAS,GAAG;IAChC,MAAM,UAAU,EAAE,MAAM,aAAa;AAErC,WAAO,GADI,UAAU,QAAQ,KAAK,IACrB,QAAQ,OAAO,MAAM,GAAG;;AAEvC,OAAI,OAAO,SAAS,EAClB,QAAO,GAAG,IAAI,OAAO,OAAO,SAAS,EAAE,GAAG,OAAO,MAAM,GAAG;AAE5D,UAAO;;EAEV;;CAED,KAAK;EACH,SAAS;EACT,YAAY;EACb;;CAED,QAAQ;EACN,SAAS;EACT,YAAY;EACb;;CAED,MAAM;EACJ,SAAS;EACT,OAAO,MAAc;GACnB,MAAM,QAAQ,EAAE,QAAQ,UAAU,GAAG;AACrC,UAAO,GAAG,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,MAAM,MAAM,GAAG;;EAEpD;CACF;;;;;;;;AAWD,SAAgB,oBAAoB,OAAqE;AACvG,KAAI,UAAU,KAAA,KAAa,UAAU,MAAO,QAAO,KAAA;AAEnD,KAAI,UAAU,KACZ,QAAO,EAAE,UAAU,mBAAmB,EAAE;AAG1C,KAAI,MAAM,aAAa,MACrB,QAAO;CAGT,MAAM,UAAU,MAAM,QAAQ,MAAM,SAAS,GACzC,MAAM,SACL,KAAI,SAAQ,gBAAgB,MAAM,CAClC,OAAO,QAAQ,CACf,KAAI,MAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAW,GACpD,mBAAmB;AAEvB,QAAO;EACL,GAAG;EACH,UAAU;EACX;;AAGH,SAAS,oBAA8B;AACrC,QAAO,OAAO,OAAO,gBAAgB,CAAC,KAAI,MAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAW;;AAG3F,SAAS,WAAW,IAAoB;AACtC,QAAO,IAAI,OAAO,GAAG,QAAQ,GAAG,MAAM;;;;;;;;;;;;;AAcxC,SAAgB,YAAY,OAAgC,QAA4B;CACtF,MAAM,cAAc,OAAO,eAAe;AAE1C,KAAI,OAAO,OAAO,OAChB,MAAK,MAAM,QAAQ,OAAO,MACxB,YAAW,OAAO,KAAK,MAAM,IAAI,EAAE,YAAY;AAInD,KAAI,OAAO,UAAU,OACnB,oBAAmB,OAAO,OAAO,SAAS;AAG5C,KAAI,OAAO,UAAU,OACnB,gBAAe,OAAO,OAAO,UAAU,YAAY;;AAIvD,SAAS,WAAW,KAA8B,UAAoB,aAA2B;CAC/F,IAAI,UAAmB;AACvB,MAAK,IAAI,IAAI,GAAG,IAAI,SAAS,SAAS,GAAG,KAAK;AAC5C,MAAI,YAAY,QAAQ,YAAY,KAAA,KAAa,OAAO,YAAY,SAAU;AAC9E,YAAW,QAAoC,SAAS;;AAG1D,KAAI,YAAY,QAAQ,YAAY,KAAA,KAAa,OAAO,YAAY,SAAU;CAE9E,MAAM,OAAO,SAAS,SAAS,SAAS;AACxC,KAAI,QAAS,QACV,SAAoC,QAAQ;;AAIjD,SAAS,eAAe,KAAc,UAAoB,aAA2B;AACnF,KAAI,QAAQ,QAAQ,QAAQ,KAAA,EAAW;AAEvC,KAAI,MAAM,QAAQ,IAAI,EAAE;AACtB,OAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,IAC9B,KAAI,OAAO,IAAI,OAAO,SACpB,KAAI,KAAK,cAAc,IAAI,IAAc,UAAU,YAAY;WACtD,OAAO,IAAI,OAAO,SAC3B,gBAAe,IAAI,IAAI,UAAU,YAAY;AAGjD;;AAGF,KAAI,OAAO,QAAQ,UAAU;EAC3B,MAAM,SAAS;AACf,OAAK,MAAM,OAAO,QAAQ;GACxB,MAAM,MAAM,OAAO;AACnB,OAAI,OAAO,QAAQ,SACjB,QAAO,OAAO,cAAc,KAAK,UAAU,YAAY;YAC9C,OAAO,QAAQ,SACxB,gBAAe,KAAK,UAAU,YAAY;;;;AAMlD,SAAS,cAAc,OAAe,UAAoB,aAA6B;CACrF,IAAI,SAAS;AACb,MAAK,MAAM,WAAW,UAAU;AAC9B,UAAQ,YAAY;AACpB,WAAS,OAAO,QAAQ,SAAS,YAAY;;AAE/C,QAAO;;AAGT,SAAS,mBAAmB,KAAc,SAAyB;AACjE,KAAI,QAAQ,QAAQ,QAAQ,KAAA,EAAW;AAEvC,KAAI,MAAM,QAAQ,IAAI,EAAE;AACtB,OAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,IAC9B,KAAI,OAAO,IAAI,OAAO,SACpB,KAAI,KAAK,aAAa,IAAI,IAAc,QAAQ;WACvC,OAAO,IAAI,OAAO,SAC3B,oBAAmB,IAAI,IAAI,QAAQ;AAGvC;;AAGF,KAAI,OAAO,QAAQ,UAAU;EAC3B,MAAM,SAAS;AACf,OAAK,MAAM,OAAO,QAAQ;GACxB,MAAM,MAAM,OAAO;AACnB,OAAI,OAAO,QAAQ,SACjB,QAAO,OAAO,aAAa,KAAK,QAAQ;YAC/B,OAAO,QAAQ,SACxB,oBAAmB,KAAK,QAAQ;;;;AAMxC,SAAS,aAAa,OAAe,SAA2B;CAC9D,IAAI,SAAS;AACb,MAAK,MAAM,CAAC,SAAS,SAAS,SAAS;AACrC,UAAQ,YAAY;AACpB,WAAS,OAAO,QAAQ,SAAS,KAAK;;AAExC,QAAO;;;;;;;AAQT,SAAgB,sBAAsB,KAA8E;AAClH,KAAI,QAAQ,KAAA,KAAa,QAAQ,MAAO,QAAO,KAAA;AAC/C,KAAI,QAAQ,KAAM,QAAO,oBAAoB,KAAK;CAElD,MAAM,SAAuB,EAAE;AAE/B,KAAI,MAAM,QAAQ,IAAI,MAAM,CAC1B,QAAO,QAAQ,IAAI;AAGrB,KAAI,OAAO,IAAI,gBAAgB,SAC7B,QAAO,cAAc,IAAI;AAG3B,KAAI,IAAI,aAAa,MACnB,QAAO,WAAW;UACT,MAAM,QAAQ,IAAI,SAAS,CACpC,QAAO,WAAW,IAAI;AAGxB,KAAI,MAAM,QAAQ,IAAI,SAAS,CAC7B,QAAO,WAAY,IAAI,SAAuB,KAAK,MAAM;AACvD,MAAI,aAAa,OAAQ,QAAO;AAChC,MAAI,OAAO,MAAM,SAAU,QAAO,IAAI,OAAO,GAAG,IAAI;AACpD,MAAI,OAAO,MAAM,YAAY,MAAM,MAAM;GACvC,MAAM,MAAM;AACZ,UAAO,IAAI,OAAO,IAAI,QAAQ,IAAI,SAAS,IAAI;;AAEjD,SAAO;GACP,CAAC,QAAQ,MAAmB,MAAM,KAAK;AAG3C,QAAO,oBAAoB,OAAO;;;;;AC9LpC,SAAgB,aAAa,QAAkC;AAC7D,QAAO;;;AAIT,SAAgB,YAAY,MAAc,OAAuD;AAC/F,QAAO;EAAE;EAAM;EAAO;;;AAIxB,SAAgB,eAAe,MAAc,QAAyD;AACpG,QAAO;EAAE;EAAM;EAAQ;;AA2BzB,SAAS,eAAe,MAAc,MAAc,KAAoB;AACtE,SAAQ,MAAM,UAAU,KAAK,IAAI,KAAK,WAAW,IAAI;;;AAIvD,SAAgB,mBAAmB,UAAyB,EAAE,EAAgB;CAC5E,MAAM,yBAAS,IAAI,KAA0B;AAC7C,MAAK,MAAM,UAAU,QACnB,QAAO,IAAI,OAAO,MAAM,OAAO;CAEjC,MAAM,OAAO,MAAM,KAAK,OAAO,QAAQ,CAAC;AAWxC,QAAO;EACL,SAAS;EACT,WAXgB,KAAK,MAAK,MAAK,OAAO,EAAE,WAAW,WAW1C;EACT,UAXe,KAAK,MAAK,MAAK,OAAO,EAAE,UAAU,WAWzC;EACR,SAXc,KAAK,MAAK,MAAK,OAAO,EAAE,SAAS,WAWxC;EACP,qBAX0B,KAAK,MAC/B,MAAK,OAAO,EAAE,mBAAmB,cAAc,OAAO,EAAE,oBAAoB,WAUzD;EACnB,cATmB,KAAK,MAAK,MAAK,OAAO,EAAE,gBAAgB,WAS/C;EACZ,iBATsB,KAAK,MAAK,MAAK,OAAO,EAAE,iBAAiB,WAShD;EACf,kBAAkB,QAAQ;AACxB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,aAAc;AAC1B,QAAI;AACF,YAAO,aAAa,OAAO;aACpB,KAAK;AACZ,oBAAe,OAAO,MAAM,gBAAgB,IAAI;;;;EAItD,kBAAkB,KAAK;AACrB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,eAAgB;AAC5B,QAAI;AACF,YAAO,eAAe,IAAI;aACnB,KAAK;AACZ,oBAAe,OAAO,MAAM,kBAAkB,IAAI;;;;EAIxD,mBAAmB,KAAK;AACtB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,gBAAiB;AAC7B,QAAI;AACF,YAAO,gBAAgB,IAAI;aACpB,KAAK;AACZ,oBAAe,OAAO,MAAM,mBAAmB,IAAI;;;;EAIzD,MAAM,UAAU,KAAK;AACnB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,OAAQ;AACpB,QAAI;AACF,WAAM,OAAO,OAAO,IAAI;aACjB,KAAK;AACZ,oBAAe,OAAO,MAAM,UAAU,IAAI;;;;EAIhD,MAAM,SAAS,KAAK;GAClB,MAAM,SAAS,KAAK,QAAO,MAAK,OAAO,EAAE,UAAU,WAAW;AAC9D,OAAI,OAAO,WAAW,EAAG;AACzB,SAAM,QAAQ,WACZ,OAAO,IAAI,OAAO,WAAW;AAC3B,QAAI;AACF,WAAM,OAAO,MAAO,IAAI;aACjB,KAAK;AACZ,oBAAe,OAAO,MAAM,SAAS,IAAI;;KAE3C,CACH;;EAEH,MAAM,QAAQ,KAAK;AACjB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,KAAM;AAClB,QAAI;AACF,WAAM,OAAO,KAAK,IAAI;aACf,KAAK;AACZ,oBAAe,OAAO,MAAM,QAAQ,IAAI;;;;EAI9C,eAAe,KAAK;AAClB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,YAAa;AACzB,QAAI;AACF,YAAO,YAAY,IAAI;aAChB,KAAK;AACZ,oBAAe,OAAO,MAAM,eAAe,IAAI;;;;EAIrD,MAAM,SAAS,KAAK;AAClB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,MAAO;AACnB,QAAI;AACF,WAAM,OAAO,MAAM,IAAI;aAChB,KAAK;AACZ,oBAAe,OAAO,MAAM,SAAS,IAAI;;;;EAIhD;;AAGH,MAAM,cAAc,mBAAmB,EAAE,CAAC;;AAG1C,SAAgB,uBAAqC;AACnD,QAAO;;;;ACrOT,SAAS,cAAc,KAA8C;AACnE,QAAO,QAAQ,QAAQ,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI;;AAGvE,MAAM,0BAAU,IAAI,MAAM;AAC1B,SAAS,SAAiB;AACxB,SAAQ,QAAQ,KAAK,KAAK,CAAC;AAC3B,QAAO,QAAQ,aAAa;;;AAI9B,MAAM,sBACJ;AAEF,SAAS,aAAa,QAAgB,QAAsB;AAC1D,SAAQ,KACN,WAAW,OAAO,6CAA6C,OAAO,+CAA+C,sBACtH;;AAGH,SAAS,UAAU,QAAiC,QAAuC;AACzF,MAAK,MAAM,OAAO,QAAQ;EACxB,MAAM,YAAY,OAAO;AACzB,MAAI,cAAc,KAAA,KAAa,cAAc,KAAM;EACnD,MAAM,YAAY,OAAO;AACzB,MAAI,cAAc,UAAU,IAAI,cAAc,UAAU,CACtD,WAAU,WAAW,UAAU;WACtB,MAAM,QAAQ,UAAU,IAAI,MAAM,QAAQ,UAAU,CAC7D,QAAO,OAAO,CAAC,GAAG,WAAW,GAAG,UAAU;MAE1C,QAAO,OAAO;;;AAKpB,IAAI,YAAgC;CAClC,SAAS;CACT,aAAa;CACd;AAED,IAAI,eAAe,OAAO;AAC1B,IAAI,iBAAiC,EAAE;AACvC,IAAI,kBAAkB;AACtB,IAAI;AACJ,IAAI;AACJ,IAAI,gBAAgB;AACpB,IAAI,eAAe;;AAEnB,IAAI,iBAA2B;AAC/B,IAAI,UAAU;AACd,IAAI,qBAAmC,sBAAsB;;;;;AAM7D,SAAgB,WAAW,SAAuB,EAAE,EAAQ;AAC1D,iBAAgB,OAAO,WAAW;CAClC,MAAM,WAAW,mBAAmB;AAEpC,aAAY;EACV,SAAS,OAAO,KAAK,WAAW,SAAS,WAAW;EACpD,aAAa,OAAO,KAAK,eAAe,SAAS,eAAe;EAChE,SAAS,OAAO,KAAK,WAAW,SAAS;EACzC,YAAY,OAAO,KAAK,cAAc,SAAS;EAC/C,QAAQ,OAAO,KAAK,UAAU,SAAS;EACxC;AAED,gBAAe,OAAO,UAAU,OAAO;AACvC,kBAAiB,OAAO,YAAY,EAAE;AACtC,mBAAkB,OAAO,aAAa;AACtC,eAAc,OAAO;AACrB,gBAAe,oBAAoB,OAAO,UAAU,CAAC,OAAO,CAAC;AAC7D,gBAAe,OAAO,UAAU;AAChC,kBAAiB,OAAO,YAAY;AACpC,sBAAqB,OAAO,SAAS,SACjC,mBAAmB,OAAO,QAAQ,GAClC,sBAAsB;AAE1B,KAAI,mBAAmB,QAAQ,SAAS,EACjC,oBAAmB,SAAS,EAAE,KAAK,EAAE,GAAG,WAAW,EAAE,CAAC;CAG7D,MAAM,cAAc,CAAC,CAAC,eAAe,mBAAmB;AACxD,KAAI,gBAAgB,CAAC,eAAe,CAAC,OAAO,sBAC1C,SAAQ,KAAK,gMAAgM;;;;;;;AASjN,SAAgB,wBAAsC;AACpD,QAAO;;;;;AAMT,SAAgB,YAAqB;AACnC,QAAO;;;;;;;AAQT,SAAgB,aAAmB;AACjC,WAAU;;;;;AAMZ,SAAgB,iBAA0B;AACxC,QAAO;;;;;;;AAQT,SAAgB,iBAA4E;AAC1F,QAAO;;;;;;AAOT,SAAS,aAAa,OAA0B;CAC9C,MAAM,EAAE,UAAU;AAClB,KAAI,CAAC,MACH,QAAO;CAIT,MAAM,aAAa,UAAU,WAAW,MAAM,UAAU,KAAA,IACpD,MACA,MAAM,UAAU;AAGpB,KAAI,cAAc,EAAG,QAAO;AAC5B,KAAI,cAAc,IAAK,QAAO;AAE9B,QAAO,KAAK,QAAQ,GAAG,MAAM;;;;;;AAO/B,SAAgB,WAAW,KAAmC;CAC5D,MAAM,EAAE,SAAS;AACjB,KAAI,CAAC,MAAM,OAAQ,QAAO;AAE1B,QAAO,KAAK,MAAM,cAAc;AAC9B,MAAI,UAAU,WAAW,KAAA,KAAa,IAAI,WAAW,KAAA,KAAa,IAAI,UAAU,UAAU,OACxF,QAAO;AAET,MAAI,UAAU,aAAa,KAAA,KAAa,IAAI,aAAa,KAAA,KAAa,IAAI,YAAY,UAAU,SAC9F,QAAO;AAET,MAAI,UAAU,QAAQ,IAAI,QAAQ,eAAe,IAAI,MAAM,UAAU,KAAK,CACxE,QAAO;AAET,SAAO;GACP;;AASJ,SAAS,cACP,OACA,OACA,UAAgC,EAAE,EAChB;CAClB,MAAM,EAAE,aAAa,OAAO,YAAY,OAAO,cAAc;AAC7D,KAAI,CAAC,cAAe,QAAO;AAE3B,KAAI,CAAC,WAAW;AACd,MAAI,CAAC,eAAe,OAAO,eAAe,CACxC,QAAO;AAET,MAAI,CAAC,aAAa,MAAM,CACtB,QAAO;;CAIX,IAAI;AACJ,KAAI,WAAW;AACb,QAAM,YAAY,QAAQ;AAC1B,QAAM,QAAQ;AACd,MAAI,MAAM,YAAY,KAAA,EAAW,OAAM,UAAU,UAAU;AAC3D,MAAI,MAAM,gBAAgB,KAAA,EAAW,OAAM,cAAc,UAAU;AACnE,MAAI,UAAU,YAAY,KAAA,KAAa,MAAM,YAAY,KAAA,EAAW,OAAM,UAAU,UAAU;AAC9F,MAAI,UAAU,eAAe,KAAA,KAAa,MAAM,eAAe,KAAA,EAAW,OAAM,aAAa,UAAU;AACvG,MAAI,UAAU,WAAW,KAAA,KAAa,MAAM,WAAW,KAAA,EAAW,OAAM,SAAS,UAAU;AAC3F,cAAY;OAEZ,aAAY;EACV,WAAW,QAAQ;EACnB;EACA,GAAG;EACH,GAAG;EACJ;AAGH,eAAc,UAAU;AAExB,KAAI,aACF,aAAY,WAAW,aAAa;AAGtC,KAAI,CAAC,aACH,KAAI,aACF,sBAAqB,UAAU;UACtB,gBACT,SAAQ,iBAAiB,MAAM,EAAE,KAAK,UAAU,UAAU,CAAC;KAE3D,SAAQ,iBAAiB,MAAM,EAAE,UAAU;AAI/C,KAAI,CAAC,YAAY;EACf,MAAM,gBAAyC,EAAE;AACjD,MAAI,YACF,eAAc,MACX,YAAY;AACX,OAAI;AACF,UAAM,YAAa,EAAE,OAAO,WAAW,CAAC;YACjC,KAAK;AACZ,YAAQ,MAAM,yBAAyB,IAAI;;MAE3C,CACL;AAEH,MAAI,mBAAmB,SACrB,eAAc,KAAK,mBAAmB,SAAS,EAAE,OAAO,WAAW,CAAC,CAAC;AAEvE,MAAI,cAAc,SAAS,KAAK,UAC9B,WAAU,QAAQ,IAAI,cAAc,CAAC;;AAIzC,QAAO;;AAGT,SAAS,cAAc,OAAiB,KAAa,SAAuB;AAC1E,KAAI,CAAC,cAAe;AAEpB,KAAI,gBAAgB,CAAC,cAAc;AACjC,MAAI,CAAC,eAAe,OAAO,eAAe,CACxC;AAEF,MAAI,CAAC,aAAa,MAAM,CACtB;AAGF,MAAI,WAAW,EAAE;GACf,MAAM,aAAa,iBAAiB,MAAM;GAC1C,MAAM,YAAY,QAAQ,CAAC,MAAM,IAAI,GAAG;AACxC,WAAQ,IACN,KAAK,UAAU,QAAQ,mBAAmB,IAAI,CAAC,MAAM,mBAAmB,QAAQ,IAChF,UAAU,KACV,UAAU,OACV,YACA,UAAU,MACX;SACI;GACL,MAAM,QAAQ,cAAc,MAAM;GAClC,MAAM,YAAY,QAAQ,CAAC,MAAM,IAAI,GAAG;AACxC,WAAQ,IAAI,GAAG,OAAO,MAAM,YAAY,OAAO,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,MAAM,GAAG,UAAU;;AAGpG;;AAEF,eAAc,OAAO;EAAE;EAAK;EAAS,CAAC;;AAGxC,SAAS,YAAY,OAAwB;AAC3C,KAAI,UAAU,QAAQ,UAAU,KAAA,EAC9B,QAAO,OAAO,MAAM;AAEtB,KAAI,OAAO,UAAU,UAAU;EAC7B,MAAM,QAAkB,EAAE;AAC1B,OAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,MAAiC,CACnE,KAAI,MAAM,KAAA,KAAa,MAAM,KAC3B,KAAI,OAAO,MAAM,SACf,OAAM,KAAK,GAAG,EAAE,GAAG,KAAK,UAAU,EAAE,GAAG;MAEvC,OAAM,KAAK,GAAG,EAAE,GAAG,IAAI;AAI7B,SAAO,MAAM,KAAK,IAAI;;AAExB,QAAO,OAAO,MAAM;;AAGtB,SAAS,WAAW,MAAsB;AACxC,KAAI,OAAO,IAAM,QAAO,IAAI,KAAK,QAAQ,EAAE;AAC3C,KAAI,OAAO,EAAG,QAAO,IAAI,KAAK,QAAQ,EAAE;AACxC,QAAO,IAAI,KAAK,QAAQ,EAAE;;AAS5B,SAAS,eAAe,IAA0C;CAChE,MAAM,UAAuB,EAAE;CAG/B,MAAM,cAAwB,EAAE;AAChC,KAAI,GAAG,OAAO;EACZ,IAAI,IAAI,OAAO,GAAG,MAAM;AACxB,MAAI,GAAG,SAAU,MAAK,KAAK,GAAG,SAAS;AACvC,cAAY,KAAK,EAAE;;AAErB,KAAI,GAAG,MAAO,aAAY,KAAK,GAAG,GAAG,MAAM,OAAQ,GAAG,QAAmB,IAAI,MAAM,KAAK;AACxF,KAAI,GAAG,SAAU,GAAG,QAAmB,EAAG,aAAY,KAAK,GAAG,GAAG,MAAM,QAAQ;AAC/E,SAAQ,KAAK;EAAE,KAAK;EAAM,OAAO,YAAY,KAAK,MAAM;EAAE,CAAC;CAG3D,MAAM,cAAc,GAAG;CACvB,MAAM,eAAe,GAAG;CACxB,MAAM,cAAc,GAAG;AACvB,KAAI,gBAAgB,KAAA,KAAa,iBAAiB,KAAA,GAAW;EAC3D,IAAI,UAAU,GAAG,YAAY,QAAQ,aAAa;AAClD,MAAI,YAAa,YAAW,KAAK,YAAY;EAC7C,MAAM,SAAmB,EAAE;AAC3B,MAAI,GAAG,gBAAiB,QAAO,KAAK,GAAG,GAAG,gBAAgB,aAAa;AACvE,MAAI,GAAG,iBAAkB,QAAO,KAAK,GAAG,GAAG,iBAAiB,cAAc;AAC1E,MAAI,GAAG,gBAAiB,QAAO,KAAK,GAAG,GAAG,gBAAgB,YAAY;AACtE,MAAI,OAAO,OAAQ,YAAW,MAAM,OAAO,KAAK,MAAM;AACtD,UAAQ,KAAK;GAAE,KAAK;GAAa,OAAO;GAAS,CAAC;;CAIpD,MAAM,UAAU,GAAG;CACnB,MAAM,WAAW,GAAG;CACpB,MAAM,MAAM,GAAG;AACf,KAAI,YAAY,KAAA,KAAa,aAAa,KAAA,GAAW;EACnD,MAAM,QAAkB,EAAE;AAC1B,MAAI,YAAY,KAAA,EAAW,OAAM,KAAK,GAAG,eAAe,QAAQ,CAAC,iBAAiB;AAClF,MAAI,aAAa,KAAA,EAAW,OAAM,KAAK,GAAG,eAAe,SAAS,CAAC,QAAQ;EAC3E,IAAI,aAAa,MAAM,KAAK,MAAM;AAClC,MAAI,IAAK,eAAc,MAAM,IAAI;AACjC,UAAQ,KAAK;GAAE,KAAK;GAAgB,OAAO;GAAY,CAAC;;AAI1D,KAAI,GAAG,kBAAkB,KAAA,EACvB,SAAQ,KAAK;EAAE,KAAK;EAAW,OAAO,WAAW,GAAG,cAAwB;EAAE,CAAC;AAIjF,KAAI,GAAG,oBAAoB,KAAA,EACzB,SAAQ,KAAK;EAAE,KAAK;EAAoB,OAAO,eAAe,GAAG,gBAA0B;EAAE,CAAC;CAIhG,MAAM,YAAY,GAAG;CACrB,MAAM,QAAQ,GAAG;CACjB,MAAM,YAAY,WAAW,SAAS,OAAO,UAAU,OAAO,WAAW;AAEzE,KAAI,OAAO,QAAQ;EACjB,MAAM,WAAW,MAAM,KAAK,GAAG,QAAQ;GACrC,MAAM,OAAO,EAAE,UAAU,MAAM;GAC/B,IAAI,OAAO,GAAG,EAAE,KAAK,GAAG,eAAe,EAAE,WAAW,CAAC,GAAG;AACxD,OAAI,EAAE,MAAO,SAAQ,IAAI,EAAE;AAC3B,OAAI,aAAa,aAAa,MAAM,UAAU,QAAQ;IACpD,MAAM,KAAK,UAAU;IACrB,MAAM,WAAW,OAAO,GAAG,UAAU,WAAW,GAAG,QAAQ,KAAK,UAAU,GAAG,MAAM;IACnF,MAAM,YAAY,SAAS,SAAS,MAAM,GAAG,SAAS,MAAM,GAAG,IAAI,CAAC,KAAK;AACzE,YAAQ,IAAI;;AAEd,UAAO;IACP;AACF,UAAQ,KAAK;GAAE,KAAK;GAAY,OAAO;GAAI;GAAU,CAAC;YAC7C,WAAW,OACpB,KAAI,WAAW;EACb,MAAM,WAAY,UAAsD,KAAK,OAAO;GAClF,MAAM,WAAW,OAAO,GAAG,UAAU,WAAW,GAAG,QAAQ,KAAK,UAAU,GAAG,MAAM;GACnF,MAAM,YAAY,SAAS,SAAS,MAAM,GAAG,SAAS,MAAM,GAAG,IAAI,CAAC,KAAK;AACzE,UAAO,GAAG,GAAG,KAAK,GAAG,UAAU;IAC/B;AACF,UAAQ,KAAK;GAAE,KAAK;GAAY,OAAO;GAAI;GAAU,CAAC;OAEtD,SAAQ,KAAK;EAAE,KAAK;EAAY,OAAQ,UAAuB,KAAK,KAAK;EAAE,CAAC;CAKhF,MAAM,aAAa,GAAG;AACtB,KAAI,YAAY,QAAQ;EACtB,MAAM,eAAe,WAAW,OAAM,MAAK,EAAE,UAAU,WAAW,GAAI,MAAM;EAC5E,MAAM,WAAW,WAAW,KAAK,MAAM;GAErC,IAAI,OAAO,GADI,eAAe,KAAK,GAAG,EAAE,MAAM,KACvB,EAAE,YAAY,QAAQ,EAAE,aAAa;GAC5D,MAAM,YAAY,EAAE;AACpB,OAAI,WAAW,OAAQ,SAAQ,KAAK,UAAU,KAAK,KAAK,CAAC;AACzD,UAAO;IACP;AACF,UAAQ,KAAK;GAAE,KAAK;GAAY,OAAO;GAAI;GAAU,CAAC;YAC7C,GAAG,SAAU,GAAG,QAAmB,EAC5C,SAAQ,KAAK;EAAE,KAAK;EAAY,OAAO,OAAO,GAAG,MAAM;EAAE,CAAC;CAI5D,MAAM,YAAY,GAAG;AACrB,KAAI,WAAW;EACb,MAAM,QAAkB,EAAE;AAC1B,MAAI,UAAU,MAAO,OAAM,KAAK,OAAO,UAAU,MAAM,CAAC;AACxD,QAAM,KAAK,GAAG,UAAU,OAAO,SAAS;AACxC,MAAI,UAAU,WAAY,OAAM,KAAK,GAAG,UAAU,WAAW,GAAG;AAChE,MAAI,UAAU,MAAO,OAAM,KAAK,GAAG,UAAU,MAAM,QAAQ;AAC3D,UAAQ,KAAK;GAAE,KAAK;GAAgB,OAAO,MAAM,KAAK,MAAM;GAAE,CAAC;;AAGjE,KAAI,GAAG,aAAc,SAAQ,KAAK;EAAE,KAAK;EAAmB,OAAO,OAAO,GAAG,aAAa;EAAE,CAAC;AAC7F,KAAI,GAAG,MAAO,SAAQ,KAAK;EAAE,KAAK;EAAY,OAAO,OAAO,GAAG,MAAM;EAAE,CAAC;AACxE,KAAI,GAAG,WAAY,SAAQ,KAAK;EAAE,KAAK;EAAiB,OAAO,OAAO,GAAG,WAAW;EAAE,CAAC;AAEvF,QAAO;;AAGT,SAAS,qBAAqB,OAAsC;CAClE,MAAM,EAAE,WAAW,OAAO,SAAS,aAAa,SAAS,GAAG,SAAS;CACrE,MAAM,KAAM,UAAqB,MAAM,IAAI,GAAG;CAC9C,MAAM,UAAU,WAAW;CAE3B,MAAM,QAAkB,EAAE;CAC1B,MAAM,SAAmB,EAAE;AAE3B,KAAI,SAAS;EACX,MAAM,KAAK,iBAAiB,MAAgB;AAC5C,QAAM,KAAK,KAAK,GAAG,OAAQ,MAAiB,aAAa,CAAC,QAAQ,mBAAmB,OAAO,QAAQ,CAAC,CAAC,KAAK;AAC3G,SAAO,KAAK,UAAU,KAAK,UAAU,OAAO,IAAI,UAAU,OAAO,UAAU,MAAM,UAAU,MAAM;QAC5F;EACL,MAAM,KAAK,cAAc,MAAgB;AACzC,QAAM,KAAK,GAAG,OAAO,MAAM,KAAK,OAAO,MAAM,GAAG,KAAM,MAAiB,aAAa,GAAG,OAAO,MAAM,GAAG,OAAO,KAAK,GAAG,QAAQ,GAAG,OAAO,QAAQ;;AAGlJ,KAAI,KAAK,UAAU,KAAK,MAAM;AAC5B,QAAM,KAAK,UAAU,IAAI,mBAAmB,OAAO,KAAK,OAAO,CAAC,CAAC,GAAG,mBAAmB,OAAO,KAAK,KAAK,CAAC,KAAK,IAAI,KAAK,OAAO,GAAG,KAAK,OAAO;AAC7I,SAAO,KAAK;AACZ,SAAO,KAAK;;AAGd,KAAI,KAAK,QAAQ;EACf,MAAM,KAAK,UACL,KAAK,UAAqB,MAAM,UAAU,MAAM,UAAU,QAC1D,KAAK,UAAqB,MAAM,OAAO,MAAM,OAAO;AAC1D,MAAI,SAAS;AACX,SAAM,KAAK,MAAM,KAAK,OAAO,IAAI;AACjC,UAAO,KAAK,IAAI,UAAU,MAAM;QAEhC,OAAM,KAAK,IAAI,KAAK,KAAK,SAAS,OAAO,QAAQ;AAEnD,SAAO,KAAK;;AAGd,KAAI,KAAK,UAAU;AACjB,MAAI,SAAS;AACX,SAAM,KAAK,MAAM,mBAAmB,MAAM,KAAK,WAAW,CAAC,IAAI;AAC/D,UAAO,KAAK,UAAU,KAAK,UAAU,MAAM;QAE3C,OAAM,KAAK,IAAI,OAAO,IAAI,KAAK,KAAK,WAAW,OAAO,QAAQ;AAEhE,SAAO,KAAK;;AAGd,SAAQ,IAAI,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO;CAEtC,MAAM,SAAS,KAAK;AACpB,KAAI,UAAU,OAAO,WAAW,SAC9B,QAAO,KAAK;CAGd,MAAM,cAAc,OAAO,QAAQ,KAAK,CAAC,QAAQ,CAAC,GAAG,OAAO,MAAM,KAAA,EAAU;CAC5E,MAAM,YAAY,SAAS,eAAe,OAAO,GAAG,EAAE;CACtD,MAAM,aAA0B,CAC9B,GAAG,YAAY,KAAK,CAAC,KAAK,YAAY;EAAE;EAAK,OAAO,YAAY,MAAM;EAAE,EAAE,EAC1E,GAAG,UACJ;AAED,MAAK,IAAI,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;EAC1C,MAAM,QAAQ,WAAW;EACzB,MAAM,cAAc,MAAM,YAAY,MAAM,SAAS,SAAS;EAE9D,MAAM,SADS,MAAM,WAAW,SAAS,KAAK,CAAC,cACvB,OAAO;AAE/B,MAAI,SAAS;GACX,MAAM,MAAM,MAAM,QAAQ,IAAI,mBAAmB,MAAM,MAAM,KAAK;AAClE,WAAQ,IAAI,OAAO,OAAO,OAAO,mBAAmB,MAAM,IAAI,CAAC,KAAK,OAAO,UAAU,KAAK,UAAU,OAAO,UAAU,MAAM,UAAU,MAAM;SACtI;GACL,MAAM,MAAM,MAAM,QAAQ,IAAI,MAAM,UAAU;AAC9C,WAAQ,IAAI,KAAK,OAAO,MAAM,SAAS,OAAO,MAAM,GAAG,OAAO,OAAO,MAAM,IAAI,GAAG,OAAO,QAAQ,MAAM;;AAGzG,MAAI,aAAa;GAEf,MAAM,YADc,MAAM,WAAW,SAAS,IACd,MAAM;AACtC,QAAK,IAAI,IAAI,GAAG,IAAI,MAAM,SAAU,QAAQ,KAAK;IAC/C,MAAM,QAAQ,MAAM,SAAU;IAE9B,MAAM,cADc,MAAM,MAAM,SAAU,SAAS,IACjB,OAAO;AACzC,QAAI,QACF,SAAQ,IAAI,OAAO,UAAU,IAAI,YAAY,KAAK,mBAAmB,MAAM,IAAI,UAAU,KAAK,UAAU,MAAM;QAE9G,SAAQ,IAAI,KAAK,OAAO,MAAM,UAAU,IAAI,cAAc,OAAO,MAAM,GAAG,QAAQ;;;;;AAO5F,SAAS,gBAAgB,OAAiB;AACxC,QAAO,SAAS,UAAU,YAA8C,SAAwB;AAC9F,MAAI,OAAO,eAAe,YAAY,YAAY,KAAA,EAChD,eAAc,OAAO,YAAY,QAAQ;WAChC,OAAO,eAAe,SAC/B,eAAc,OAAO,WAAW;MAEhC,eAAc,OAAO,OAAO,OAAO,WAAW,CAAC;;;;;;;;;;;;AAcrD,MAAM,OAAY;CAChB,MAAM,gBAAgB,OAAO;CAC7B,OAAO,gBAAgB,QAAQ;CAC/B,MAAM,gBAAgB,OAAO;CAC7B,OAAO,gBAAgB,QAAQ;CAChC;AAKD,MAAM,aAA8B;CAClC,MAAM;CACN,QAAQ;CACR,OAAO;CACP,OAAO;CACP,OAAO;AACL,SAAO;;CAET,aAAa;AACX,SAAO,EAAE;;CAEX,OAZgB,OAAO,aAAa,IAAI,EAAE,YAAY,IAAI,CAY1C;CACjB;;;;;;;;;;;;;;;;AAgCD,SAAgB,aAAyD,iBAA0C,EAAE,EAAE,iBAAmE;AACxL,KAAI,CAAC,cAAe,QAAO;CAE3B,MAAM,aAAa,iBAAiB,eAAe;CACnD,MAAM,YAAY,iBAAiB;CACnC,MAAM,YAAY,KAAK,KAAK;CAC5B,MAAM,UAAmC,EAAE,GAAG,gBAAgB;CAC9D,IAAI,WAAW;CACf,IAAI,UAAU;CACd,IAAI,UAAU;CAEd,SAAS,OAAO,OAAwB,SAAuB;AAC7D,MAAI,CAAC,MAAM,QAAQ,QAAQ,YAAY,CACrC,SAAQ,cAAc,EAAE;AAEzB,UAAQ,YAA0B,KAAK;GACtC;GACA;GACA,WAAW,QAAQ;GACpB,CAAC;;CAGJ,MAAM,cAAc,SAAS,MAAM,OAAyB;AAC1D,MAAI,SAAS;AACX,gBAAa,eAAe,yBAAyB,MAAM,OAAO,GAAG;AACrE;;EAEF,MAAM,SAAS,iBAAiB,MAAM;AACtC,MAAI,CAAC,cAAc,QAAQ,MAAM,CAC/B,SAAQ,QAAQ;MAEhB,WAAU,QAAQ,OAAkC,OAA6C;AAEnG,UAAQ,kBAAkB;;AAG5B,aAAY,OAAO,SAAS,KAAK,QAAgB,OAAqD;AACpG,cAAY;GAAE,GAAG;GAAO,SAAS;GAAU;GAAQ,CAAC;;AAGtD,QAAO;EACL,OAAO;EACP,IAAI,MAA6B;AAC/B,OAAI,SAAS;IACX,MAAM,OAAO,OAAO,KAAK,KAAgC;AACzD,iBAAa,aAAa,iBAAiB,KAAK,SAAS,KAAK,KAAK,KAAK,GAAG,UAAU,GAAG;AACxF;;AAEF,aAAU,SAAS,KAAgC;;EAGrD,MAAM,OAAuB,cAAsC;AACjE,OAAI,SAAS;AAIX,iBAAa,eAAe,kBAHf,eACT,CAAC,GAAG,OAAO,KAAK,aAAwC,EAAE,QAAQ,GAClE,CAAC,QAAQ,EACqC,KAAK,KAAK,CAAC,GAAG;AAChE;;AAEF,cAAW;GACX,MAAM,MAAM,OAAO,UAAU,WAAW,IAAI,MAAM,MAAM,GAAG;AAE3D,OAAI,aACF,WAAU,SAAS,aAAwC;GAG7D,MAAM,WAAoC;IACxC,MAAM,IAAI;IACV,SAAS,IAAI;IACb,OAAO,IAAI;IACZ;GACD,MAAM,YAAY;AAClB,QAAK,MAAM,KAAK;IAAC;IAAU;IAAc;IAAc;IAAiB;IAAQ;IAAS;IAAW,CAClG,KAAI,KAAK,IAAK,UAAS,KAAK,UAAU;AAGxC,OAAI,cAAc,QAAQ,MAAM,CAC9B,WAAU,QAAQ,OAAkC,SAAS;OAE7D,SAAQ,QAAQ;;EAIpB,KAAK,SAAiB,aAAqC;AACzD,OAAI,SAAS;AAIX,iBAAa,cAAc,kBAHd,cACT,CAAC,WAAW,GAAG,OAAO,KAAK,YAAuC,CAAC,QAAO,MAAK,MAAM,cAAc,CAAC,GACpG,CAAC,UAAU,EACkC,KAAK,KAAK,CAAC,GAAG;AAC/D;;AAEF,UAAO,QAAQ,QAAQ;AACvB,OAAI,aAAa;IACf,MAAM,EAAE,aAAa,GAAG,GAAG,SAAS;AACpC,cAAU,SAAS,KAAK;;;EAI5B,KAAK,SAAiB,aAAqC;AACzD,OAAI,SAAS;AAIX,iBAAa,cAAc,kBAHd,cACT,CAAC,WAAW,GAAG,OAAO,KAAK,YAAuC,CAAC,QAAO,MAAK,MAAM,cAAc,CAAC,GACpG,CAAC,UAAU,EACkC,KAAK,KAAK,CAAC,GAAG;AAC/D;;AAEF,aAAU;AACV,UAAO,QAAQ,QAAQ;AACvB,OAAI,aAAa;IACf,MAAM,EAAE,aAAa,GAAG,GAAG,SAAS;AACpC,cAAU,SAAS,KAAK;;;EAI5B,KAAK,WAA0E;AAC7E,OAAI,SAAS;AACX,iBAAa,cAAc,2BAA2B;AACtD,WAAO;;GAGT,MAAM,aAAa,KAAK,KAAK,GAAG;GAChC,MAAM,QAAkB,WAAW,UAAU,UAAU,SAAS;GAEhE,IAAI,YAAY;AAChB,OAAI,WAAW,WACb,aAAY;YACH,sBAAsB,QAAQ,CACvC,aAAY;YACH,eAAe,MAAM,OAE9B,aAAY,WAAW;IACrB,QAFc,WAAmD,UAAU,QAAQ;IAGnF,UAAU;IACV,MAAM,QAAQ;IACd,QAAQ,QAAQ;IAChB;IACD,CAAC;AAGJ,OAAI,CAAC,aAAa,CAAC,aAAa,MAAM,EAAE;AACtC,cAAU;AACV,WAAO;;AAGT,OAAI,WAAW;IACb,MAAM,MAAM;AACZ,SAAK,MAAM,OAAO,IAChB,KAAI,QAAQ,aAAc,SAAQ,OAAO,IAAI;;AAGjD,WAAQ,WAAW,eAAe,WAAW;GAE7C,MAAM,OAAO,cAAc,OAAO,SAAS;IAAE;IAAY,WAAW;IAAM;IAAW,CAAC;AACtF,aAAU;AACV,UAAO;;EAGT,aAAwD;AACtD,UAAO,EAAE,GAAG,SAAS;;EAExB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BH,SAAgB,oBAAgE,UAAgC,EAAE,EAAE,iBAAmE;CACrL,MAAM,EAAE,QAAQ,MAAM,WAAW,WAAW,qBAAqB;CACjE,MAAM,UAAmC,EAAE;AAC3C,KAAI,WAAW,KAAA,EAAW,SAAQ,SAAS;AAC3C,KAAI,SAAS,KAAA,EAAW,SAAQ,OAAO;AACvC,KAAI,cAAc,KAAA,EAAW,SAAQ,YAAY;AACjD,QAAO,aAAgB,SAAS;EAC9B,GAAG;EACH,WAAW,iBAAiB,aAAa;EAC1C,CAAC;;;;;AAMJ,SAAgB,iBAAqC;AACnD,QAAO,EAAE,GAAG,WAAW;;AAMzB,IAAI,OAAO,qBAAqB,YAAa,YAAW,iBAAiB;;;;;;;AChzBzE,MAAa,uBAAuB;;;;;;AA0BpC,SAAS,gBAAgB,OAAwB;AAC/C,KAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,MAAM;AAC7E,KAAI,MAAM,QAAQ,MAAM,CAAE,QAAO,IAAI,MAAM,IAAI,gBAAgB,CAAC,KAAK,IAAI,CAAC;AAE1E,QAAO,IADM,OAAO,KAAK,MAAiC,CAAC,MAC5C,CAAC,KAAI,MAAK,GAAG,KAAK,UAAU,EAAE,CAAC,GAAG,gBAAiB,MAAkC,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC;;;;;;;;;AAUvH,SAAS,QAAQ,OAAe,MAAsB;CACpD,IAAI,IAAI,SAAS;AACjB,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,OAAK,MAAM,WAAW,EAAE,GAAG;AAC3B,MAAI,KAAK,KAAK,GAAG,SAAW,KAAK;;AAEnC,QAAO,MAAM;;;;;;;;;;;AAYf,SAAS,sBAAsB,OAAoB,WAA2B;CAC5E,MAAM,UAAU,UAAU,MAAM,GAAG,GAAG;CACtC,MAAM,UAAU,gBAAgB;EAC9B,QAAQ,MAAM;EACd,OAAO;GAAE,MAAM,MAAM,MAAM;GAAM,IAAI,MAAM,MAAM;GAAI;EACrD,QAAQ,MAAM,SAAS;GAAE,MAAM,MAAM,OAAO;GAAM,IAAI,MAAM,OAAO;GAAI,GAAG,KAAA;EAC1E,SAAS,MAAM;EACf,WAAW;EACZ,CAAC;CACF,MAAM,IAAI,QAAQ,SAAS,WAAW,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;CACpE,MAAM,IAAI,QAAQ,SAAS,WAAW,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;CACpE,MAAM,IAAI,QAAQ,SAAS,UAAW,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;CACpE,MAAM,IAAI,QAAQ,SAAS,WAAW,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;AACpE,QAAO,IAAI,IAAI,IAAI;;;;;;;;;;AAWrB,SAAgB,iBAAiB,OAAgC;AAC/D,QAAO;EACL,QAAQ,MAAM;EACd,OAAO,MAAM;EACb,QAAQ,MAAM;EACd,SAAS,MAAM,WAAW;EAC1B,QAAQ,MAAM;EACd,SAAS,MAAM;EACf,aAAa,MAAM;EACnB,eAAe,MAAM;EACrB,SAAS,MAAM,WAAA;EAChB;;;;;;AAOH,IAAI,iBAAgF;;AAGpF,SAAS,cAAc,OAAoB,WAAgC;AACzE,KAAI,MAAM,eAAgB,QAAO;AACjC,QAAO;EAAE,GAAG;EAAO,gBAAgB,sBAAsB,OAAO,UAAU;EAAE;;;;;;;;;;;;;;;;;;;;AAqB9E,SAAgB,iBAA6D,QAA8C;CACzH,MAAM,SAAS;AACf,KAAI,OAAO,MAAO,QAAO;CAEzB,MAAM,QAAQ,SAAS,MAAM,OAAyB;EACpD,MAAM,SAAS,iBAAiB,MAAM;AACtC,SAAO,IAAI,EAAE,OAAO,QAAQ,CAA+B;AAC3D,gBAAc,OAAO;;AAGvB,OAAM,OAAO,SAAS,KAAK,QAAgB,OAAqD;AAC9F,QAAM;GAAE,GAAG;GAAO,SAAS;GAAU;GAAQ,CAAC;;AAGhD,QAAO,QAAQ;AACf,QAAO;;;;;;;AAQT,SAAS,cAAgC,QAAgC;CACvE,MAAM,MAAM,OAAO,YAAY;AAC/B,KAAI,kBAAkB;;;;;;;;;;;;;;;;;;;;;AAsCxB,SAAgB,MAAM,OAAqC;CACzD,MAAM,SAAS,iBAAiB,MAAM;CAEtC,MAAM,OADS,aAAa,EAAE,OAAO,QAAQ,CAC1B,CAAC,KAAK,EAAE,YAAY,MAAM,CAAqE;AAClH,kBAAiB,QAAQ,KAAK;AAC9B,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BT,SAAgB,UACd,SACA,IAC4D;AAC5D,QAAO,OAAO,OAAO,QAAQ;EAC3B,MAAM,SAAS,OAAO,QAAQ,WAAW,aAAa,QAAQ,OAAO,MAAM,GAAG,QAAQ;AACtF,MAAI;GACF,MAAM,SAAS,MAAM,GAAG,OAAO,IAAI;AACnC,SAAM;IACJ,QAAQ,QAAQ;IAChB,OAAO,IAAI;IACX;IACA,SAAS;IACT,aAAa,IAAI;IACjB,eAAe,IAAI;IACpB,CAAC;AACF,UAAO;WACA,KAAK;GACZ,MAAM,QAAQ;GACd,MAAM,SAAS,MAAM,UAAU,MAAM;GACrC,MAAM,SAAS,eAAe,oBAAoB,WAAW;AAC7D,SAAM;IACJ,QAAQ,QAAQ;IAChB,OAAO,IAAI;IACX;IACA,SAAS,SAAS,WAAW;IAC7B,QAAQ,MAAM;IACd,aAAa,IAAI;IACjB,eAAe,IAAI;IACpB,CAAC;AACF,SAAM;;;;;;;;;AAUZ,IAAa,mBAAb,cAAsC,MAAM;CAE1C,YAAY,QAAgB;AAC1B,QAAM,OAAO;AACb,OAAK,OAAO;;;;;;;;;;;;;;;;;;;;;;AAwChB,SAAgB,UACd,QACA,OACA,UAA4B,EAAE,EACgC;CAC9D,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,YAAY,IAAI,KAAK,QAAQ,eAAe,EAAE,EAAE,KAAI,MAAK,EAAE,CAAC;CAClE,MAAM,QAAwB,EAAE;CAEhC,SAAS,WAAW,MAAuB;AACzC,MAAI,UAAU,SAAS,EAAG,QAAO;AACjC,MAAI,UAAU,IAAI,KAAK,CAAE,QAAO;AAChC,OAAK,MAAM,KAAK,UACd,KAAI,KAAK,SAAS,IAAI,IAAI,CAAE,QAAO;AAErC,SAAO;;CAGT,SAAS,KAAK,GAAY,GAAY,MAAoB;AACxD,MAAI,MAAM,EAAG;AAEb,MAAI,MAAM,KAAA,KAAa,MAAM,KAAA,GAAW;AACtC,SAAM,KAAK;IAAE,IAAI;IAAO,MAAM,QAAQ;IAAK,OAAO,YAAY,GAAG,KAAK;IAAE,CAAC;AACzE;;AAEF,MAAI,MAAM,KAAA,KAAa,MAAM,KAAA,GAAW;AACtC,SAAM,KAAK;IAAE,IAAI;IAAU,MAAM,QAAQ;IAAK,CAAC;AAC/C;;AAGF,MACE,MAAM,QAAQ,MAAM,QACjB,OAAO,MAAM,YAAY,OAAO,MAAM,YACtC,CAAC,MAAM,QAAQ,EAAE,IAAI,CAAC,MAAM,QAAQ,EAAE,EACzC;GACA,MAAM,OAAO,IAAI,IAAI,CAAC,GAAG,OAAO,KAAK,EAAY,EAAE,GAAG,OAAO,KAAK,EAAY,CAAC,CAAC;AAChF,QAAK,MAAM,OAAO,KAChB,MAAM,EAA8B,MAAO,EAA8B,MAAM,GAAG,KAAK,GAAG,MAAM;AAElG;;AAGF,QAAM,KAAK;GAAE,IAAI;GAAW,MAAM,QAAQ;GAAK,OAAO,YAAY,GAAG,KAAK;GAAE,CAAC;;CAG/E,SAAS,YAAY,OAAgB,MAAuB;AAC1D,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;GAC/C,MAAM,OAAO,KAAK,MAAM,IAAI,CAAC,OAAO,QAAQ;GAC5C,MAAM,OAAO,KAAK,KAAK,SAAS;AAChC,OAAI,QAAQ,WAAW,KAAK,CAAE,QAAO;AACrC,UAAO;;AAET,MAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAK,GAAG,MAAM,YAAY,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC;EAE5D,MAAM,MAA+B,EAAE;AACvC,OAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,MAAiC,CACnE,KAAI,KAAK,WAAW,EAAE,GAAG,cAAc,YAAY,GAAG,GAAG,KAAK,GAAG,IAAI;AAEvE,SAAO;;AAGT,MAAK,QAAQ,OAAO,GAAG;CACvB,MAAM,SAAuE,EAAE,OAAO;AACtF,KAAI,QAAQ,cAAe,QAAO,SAAS,YAAY,QAAQ,GAAG;AAClE,KAAI,QAAQ,aAAc,QAAO,QAAQ,YAAY,OAAO,GAAG;AAC/D,QAAO;;;;;;;;;;;;;;;;;;;;AAwCT,SAAgB,kBACd,QACA,SACiC;CACjC,MAAM,aAAa,SAAS;AAC5B,SAAQ,UAAU;EAChB,MAAM,SAAqB;GACzB,GAAG;GACH;GACD;AACD,MAAI,cAAc,MAAM,UAAU,CAAC,MAAM,OAAO,KAC9C,QAAO,SAAS;GAAE,GAAG,MAAM;GAAQ,MAAM;GAAY;AAEvD,SAAO;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCX,SAAgB,YAAuB;CACrC,MAAM,SAAwB,EAAE;CAChC,MAAM,WAAW;AACjB,mBAAkB,UAAU;AAC1B,SAAO,KAAK,MAAM;;AAGpB,QAAO;EACL;EACA,UAAU;AACR,oBAAiB;;EAEnB,iBAAiB,SAAS;AACxB,UAAO,OAAO,MAAK,UAAS,aAAa,OAAO,QAAQ,CAAC;;EAE5D;;AAkBH,SAAS,aAAa,OAAoB,SAAgC;AACxE,KAAI,QAAQ,WAAW,KAAA;MACjB,QAAQ,kBAAkB;OACxB,CAAC,QAAQ,OAAO,KAAK,MAAM,OAAO,CAAE,QAAO;aACtC,MAAM,WAAW,QAAQ,OAClC,QAAO;;AAGX,KAAI,QAAQ,YAAY,KAAA,KAAa,MAAM,YAAY,QAAQ,QAAS,QAAO;AAC/E,KAAI,QAAQ;OACL,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,QAAQ,MAAM,CAChD,KAAK,MAAM,MAAkC,OAAO,EAAG,QAAO;;AAGlE,KAAI,QAAQ,QAAQ;AAClB,MAAI,CAAC,MAAM,OAAQ,QAAO;AAC1B,OAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,QAAQ,OAAO,CACjD,KAAK,MAAM,OAAmC,OAAO,EAAG,QAAO;;AAGnE,QAAO;;;;;;;AAQT,SAAgB,sBAAsB,SAA2C;AAC/E,KAAI,QAAQ,iBAAiB;AAC3B,SAAO,QAAQ;AACf,SAAO;;AAET,KAAI,QAAQ,MAAO,QAAO;AAC1B,QAAO;;;;;;;AAQT,SAAgB,cAAc,OAAwB;CACpD,MAAM,IAAI,MAAM;AAChB,KAAI,CAAC,EAAG;AAER,OAAM,QADY,cAAc,GAAG,OAAO,MAAM,UAAU,CACnC;;;;;;;;;;;;;;;;;AAwCzB,SAAgB,cAAc,UAAgC,EAAE,EAAgD;AAC9G,QAAO,OAAO,QAAQ;EACpB,MAAM,QAAQ,IAAI;EAClB,MAAM,IAAI,MAAM;AAChB,MAAI,CAAC,EAAG;EAER,MAAM,UAAU,EAAE,GAAI,EAAE,WAAW,EAAE,EAAG;EAExC,SAAS,aAAa,KAAa,OAAiC;AAClE,OAAI,UAAU,KAAA,EAAW;AACzB,OAAI,QAAQ,aAAa,QAAQ,SAAS,KAAA,EAAW,SAAQ,OAAO;;AAGtE,eAAa,aAAa,IAAI,SAAS,UAAU;AACjD,eAAa,WAAW,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,KAAA,EAAU;AACtF,eAAa,MAAM,UAAU,IAAI,SAAS,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,UAAU,IAAI,SAAS,YAAY,CAAC;AAC3H,eAAa,aAAa,UAAU,IAAI,SAAS,aAAa,CAAC;AAE/D,MAAI,QAAQ,UAAU;GACpB,MAAM,MAAM,QAAQ,SAAS,IAAI;AACjC,OAAI,QAAQ,KAAA,EAAW,cAAa,YAAY,IAAI;;EAGtD,IAAI,EAAE,UAAU;AAChB,MAAI,CAAC,SAAS,QAAQ,QAAQ;GAC5B,MAAM,aAAa,MAAM,QAAQ,OAAO,WAAW,IAAI;AACvD,OAAI,WAAY,SAAQ;;AAG1B,QAAM,QAAQ;GAAE,GAAG;GAAG;GAAS,OAAO,SAAS,EAAE;GAAO;;;AAM5D,SAAS,UAAU,SAA6C,MAAkC;AAChG,QAAOA,YAAgB,SAAS,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCvC,SAAgB,UAAU,OAAgB,UAA4B,EAAE,EAAW;AACjF,QAAO,OAAO,QAAQ;AACpB,MAAI,CAAC,IAAI,MAAM,MAAO;AACtB,MAAI,QAAQ,OAAO;AACjB,SAAM,MAAM,IAAI;AAChB;;AAEF,QAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2Cd,SAAgB,OAAO,OAAgB,SAAiC;AACtE,KAAI,QAAQ,aAAa,QAAQ;EAC/B,MAAM,YAAY,QAAQ,aAAa;EACvC,MAAM,EAAE,WAAW;AACnB,SAAO,OAAO,QAAQ;GACpB,MAAM,IAAI,IAAI,MAAM;AACpB,OAAI,GAAG;IAEL,MAAM,YAAY,MAAM,QAAQ,WAAW,QAD3B,gBAAgB,eAAe,IAAI,MAAM,CACC,CAAC;AAC3D,QAAI,MAAM,QAAQ;KAAE,GAAG;KAAG;KAAW;;AAEvC,SAAM,MAAM,IAAI;;;CAIpB,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,EAAE,UAAU;CAClB,IAAI,eAA8B;CAClC,IAAI,cAAc,CAAC;CACnB,IAAI,QAAuB,QAAQ,SAAS;AAE5C,SAAQ,QAAQ;AACd,UAAQ,MAAM,KAAK,YAAY;GAC7B,MAAM,IAAI,IAAI,MAAM;AACpB,OAAI,GAAG;AACL,QAAI,CAAC,eAAe,OAAO;AACzB,oBAAgB,MAAM,MAAM,MAAM,IAAK;AACvC,mBAAc;;IAEhB,MAAM,WAAW,gBAAgB,KAAA;IAEjC,MAAM,OAAO,MAAM,UAAU,WADb,gBAAgB;KAAE,GAAG,eAAe,IAAI,MAAM;KAAE,OAAO;MAAE,GAAG,eAAe,IAAI,MAAM,CAAC;MAAO;MAAU;KAAE,CAC1E,CAAC;AAChD,QAAI,MAAM,QAAQ;KAAE,GAAG;KAAG;KAAU;KAAM;AAC1C,mBAAe;AACf,UAAM,OAAO,KAAK,KAAK;;AAEzB,SAAM,MAAM,IAAI;IAChB,CAAC,OAAO,QAAQ;AAChB,WAAQ,MAAM,sCAAsC,IAAI;IACxD;AACF,SAAO;;;;;;;;;AAUX,eAAe,YAAmC;CAChD,MAAM,IAAK,WAAsD;AACjE,KAAI,GAAG,OAAQ,QAAO,EAAE;AAExB,SAAO,MADW;;EAA0B;GACjC,UAAU;;AAGvB,SAAS,cAAc,WAA2B;AAChD,SAAQ,UAAU,aAAa,EAA/B;EACE,KAAK;EACL,KAAK,QACH,QAAO;EACT,KAAK;EACL,KAAK,UACH,QAAO;EACT,KAAK;EACL,KAAK,UACH,QAAO;EACT,KAAK;EACL,KAAK,UACH,QAAO;EACT,QACE,QAAO;;;AAIb,SAAS,SAAS,KAA0B;CAC1C,IAAI,MAAM;AACV,MAAK,MAAM,QAAQ,IAAI,WAAW,IAAI,CAAE,QAAO,KAAK,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;AACjF,QAAO;;AAGT,eAAe,UAAU,WAAmB,MAA+B;AAGzE,QAAO,SAAS,OADE,MADG,WAAW,EACP,OAAO,cAAc,UAAU,EAAE,IAAI,aAAa,CAAC,OAAO,KAAK,CAAC,CACrE;;AAGtB,eAAe,QAAQ,WAAmB,QAAgB,MAA+B;CACvF,MAAM,SAAS,MAAM,WAAW;CAChC,MAAM,OAAO,cAAc,UAAU;CACrC,MAAM,MAAM,MAAM,OAAO,UAAU,OAAO,IAAI,aAAa,CAAC,OAAO,OAAO,EAAE;EAAE,MAAM;EAAQ;EAAM,EAAE,OAAO,CAAC,OAAO,CAAC;AAEpH,QAAO,SAAS,MADE,OAAO,KAAK,QAAQ,KAAK,IAAI,aAAa,CAAC,OAAO,KAAK,CAAC,CACtD;;;AAItB,SAAS,eAAe,OAA6B;CACnD,MAAM,IAAI,MAAM;AAChB,KAAI,CAAC,EAAG,QAAO;CACf,MAAM,EAAE,WAAW,UAAU,MAAM,GAAG,SAAS;AAC/C,QAAO;EAAE,GAAG;EAAO,OAAO;EAAqB;;;;;;;;;;;;;;;;;;AAmBjD,MAAa,oBAAkC,EAC7C,OAAO;CACL;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,EACF"}

package/dist/{audit-CTIviX3P.d.mts → audit-CJl-wZ10.d.mts}

@@ -1,3 +1,110 @@
+//#region src/shared/plugin.d.ts
+/** Context passed to {@link EvlogPlugin.setup} when the plugin is registered. */
+interface PluginSetupContext {
+  env: EnvironmentContext;
+}
+/** Per-request context for `onRequestStart` / `onRequestFinish`. */
+interface RequestLifecycleContext {
+  logger: RequestLogger;
+  request: {
+    method: string;
+    path: string;
+    requestId?: string;
+  };
+  /** Pre-filtered safe request headers (sensitive headers stripped). */
+  headers?: Record<string, string>;
+}
+interface RequestFinishContext extends RequestLifecycleContext {
+  /** `null` when the event was sampled out or disabled. */
+  event: WideEvent | null;
+  status?: number;
+  durationMs: number;
+  error?: Error;
+}
+/** Context passed to {@link EvlogPlugin.onClientLog} for client-submitted events. */
+interface ClientLogContext {
+  /** Raw client payload, before normalization. */
+  payload: Record<string, unknown>;
+  request?: {
+    method?: string;
+    path?: string;
+  };
+  headers?: Record<string, string>;
+}
+/**
+ * Canonical extension point for evlog. A plugin can opt into any subset of
+ * hooks; drains and enrichers are special cases (see {@link drainPlugin} and
+ * {@link enricherPlugin}).
+ *
+ * @example
+ * ```ts
+ * export const tenantPlugin = definePlugin({
+ *   name: 'tenant',
+ *   onRequestStart({ logger, headers }) {
+ *     const tenantId = headers?.['x-tenant-id']
+ *     if (tenantId) logger.set({ tenant: { id: tenantId } })
+ *   },
+ *   enrich({ event }) {
+ *     event.region = process.env.REGION
+ *   },
+ * })
+ * ```
+ */
+interface EvlogPlugin {
+  /** Stable identifier. Used for de-duplication and error messages. */
+  name: string;
+  /** Run-once when the plugin is registered. */
+  setup?: (ctx: PluginSetupContext) => void | Promise<void>;
+  /** Runs before drain. */
+  enrich?: (ctx: EnrichContext) => void | Promise<void>;
+  /** Called for every emitted event. */
+  drain?: (ctx: DrainContext) => void | Promise<void>;
+  /** Tail sampling hook. Set `ctx.shouldKeep = true` to force-keep. */
+  keep?: (ctx: TailSamplingContext) => void | Promise<void>;
+  onRequestStart?: (ctx: RequestLifecycleContext) => void;
+  onRequestFinish?: (ctx: RequestFinishContext) => void;
+  /** Observe events submitted from browser/edge clients. */
+  onClientLog?: (ctx: ClientLogContext) => void;
+  /**
+   * Decorate per-request loggers with extra methods. Augment `RequestLogger`
+   * in a `.d.ts` to expose them on `useLogger()`.
+   */
+  extendLogger?: (logger: RequestLogger) => void;
+}
+/** Identity helper preserving plugin type inference. */
+declare function definePlugin(plugin: EvlogPlugin): EvlogPlugin;
+/** Wrap a standalone drain callback as an {@link EvlogPlugin}. */
+declare function drainPlugin(name: string, drain: NonNullable<EvlogPlugin['drain']>): EvlogPlugin;
+/** Wrap a standalone enricher callback as an {@link EvlogPlugin}. */
+declare function enricherPlugin(name: string, enrich: NonNullable<EvlogPlugin['enrich']>): EvlogPlugin;
+/**
+ * Compiled view of a plugin set. Errors from individual hooks are caught and
+ * logged to `console.error` with the plugin name — they never break the request.
+ */
+interface PluginRunner {
+  readonly plugins: readonly EvlogPlugin[];
+  /** `true` when at least one plugin implements the matching hook. */
+  readonly hasEnrich: boolean;
+  readonly hasDrain: boolean;
+  readonly hasKeep: boolean;
+  readonly hasRequestLifecycle: boolean;
+  readonly hasClientLog: boolean;
+  readonly hasExtendLogger: boolean;
+  applyExtendLogger: (logger: RequestLogger) => void;
+  runOnRequestStart: (ctx: RequestLifecycleContext) => void;
+  runOnRequestFinish: (ctx: RequestFinishContext) => void;
+  runEnrich: (ctx: EnrichContext) => Promise<void>;
+  /** Drains run concurrently (`Promise.allSettled`). */
+  runDrain: (ctx: DrainContext) => Promise<void>;
+  runKeep: (ctx: TailSamplingContext) => Promise<void>;
+  runOnClientLog: (ctx: ClientLogContext) => void;
+  runSetup: (ctx: PluginSetupContext) => Promise<void>;
+}
+/** De-duplicates by `name` — last registration wins. */
+declare function createPluginRunner(plugins?: EvlogPlugin[]): PluginRunner;
+/** Shared no-op runner used when no plugins are registered. */
+declare function getEmptyPluginRunner(): PluginRunner;
+//#endregion
 //#region src/types.d.ts
 declare module 'nitropack/types' {
   interface NitroRuntimeHooks {
@@ -359,6 +466,31 @@ interface LoggerConfig {
    * ```
    */
   drain?: (ctx: DrainContext) => void | Promise<void>;
+  /**
+   * Plugins registered globally with the logger.
+   *
+   * Plugins are the canonical extension contract for evlog: they can opt into
+   * `enrich`, `drain`, `keep`, lifecycle hooks (`onRequestStart`, `onRequestFinish`),
+   * client-log observation, and per-request logger decoration. See
+   * {@link import('./shared/plugin').EvlogPlugin} for the full surface.
+   *
+   * Plugin drains run alongside the standalone `drain` callback (composed with
+   * `Promise.allSettled`), so you can mix one-off drains and plugin-shaped
+   * extensions safely.
+   *
+   * @example
+   * ```ts
+   * import { initLogger, definePlugin } from 'evlog'
+   * import { createAxiomDrain } from 'evlog/axiom'
+   *
+   * initLogger({
+   *   plugins: [
+   *     definePlugin({ name: 'axiom', drain: createAxiomDrain() }),
+   *   ],
+   * })
+   * ```
+   */
+  plugins?: Array<EvlogPlugin>;
   /** @internal Suppress the "silent without drain" warning (used by hook-based frameworks like Nitro/Nuxt) */
   _suppressDrainWarning?: boolean;
 }
@@ -1136,5 +1268,5 @@ declare function signed(drain: DrainFn, options: SignedOptions): DrainFn;
  */
 declare const auditRedactPreset: RedactConfig;
 //#endregion
-export { SamplingRates as $, AuditFields as A, H3EventContext as B, buildAuditFields as C, withAudit as D, signed as E, DrainContext as F, LoggerConfig as G, InternalFields as H, EnrichContext as I, RequestLogEntry as J, ParsedError as K, EnvironmentContext as L, AuditTarget as M, BaseWideEvent as N, withAuditMethods as O, DeepPartial as P, SamplingConfig as Q, ErrorOptions as R, auditRedactPreset as S, mockAudit as T, Log as U, IngestPayload as V, LogLevel as W, RequestLoggerOptions as X, RequestLogger as Y, RouteConfig as Z, WithAuditOptions as _, AuditInput as a, auditEnricher as b, AuditOnlyOptions as c, DefinedAuditAction as d, ServerEvent as et, DrainFn as f, WithAuditContext as g, SignedOptions as h, AuditEnricherOptions as i, WideEvent as it, AuditLoggerMethod as j, AuditActor as k, AuditPatchOp as l, SignedChainState as m, AuditDeniedError as n, TailSamplingContext as nt, AuditMatcher as o, MockAudit as p, RedactConfig as q, AuditDiffOptions as r, TransportConfig as rt, AuditMethod as s, AUDIT_SCHEMA_VERSION as t, TailSamplingCondition as tt, AuditableLogger as u, audit as v, defineAuditAction as w, auditOnly as x, auditDiff as y, FieldContext as z };
-//# sourceMappingURL=audit-CTIviX3P.d.mts.map
+export { SamplingRates as $, AuditFields as A, H3EventContext as B, buildAuditFields as C, withAudit as D, signed as E, DrainContext as F, LoggerConfig as G, InternalFields as H, EnrichContext as I, RequestLogEntry as J, ParsedError as K, EnvironmentContext as L, AuditTarget as M, BaseWideEvent as N, withAuditMethods as O, DeepPartial as P, SamplingConfig as Q, ErrorOptions as R, auditRedactPreset as S, mockAudit as T, Log as U, IngestPayload as V, LogLevel as W, RequestLoggerOptions as X, RequestLogger as Y, RouteConfig as Z, WithAuditOptions as _, AuditInput as a, ClientLogContext as at, auditEnricher as b, AuditOnlyOptions as c, PluginSetupContext as ct, DefinedAuditAction as d, createPluginRunner as dt, ServerEvent as et, DrainFn as f, definePlugin as ft, WithAuditContext as g, SignedOptions as h, getEmptyPluginRunner as ht, AuditEnricherOptions as i, WideEvent as it, AuditLoggerMethod as j, AuditActor as k, AuditPatchOp as l, RequestFinishContext as lt, SignedChainState as m, enricherPlugin as mt, AuditDeniedError as n, TailSamplingContext as nt, AuditMatcher as o, EvlogPlugin as ot, MockAudit as p, drainPlugin as pt, RedactConfig as q, AuditDiffOptions as r, TransportConfig as rt, AuditMethod as s, PluginRunner as st, AUDIT_SCHEMA_VERSION as t, TailSamplingCondition as tt, AuditableLogger as u, RequestLifecycleContext as ut, audit as v, defineAuditAction as w, auditOnly as x, auditDiff as y, FieldContext as z };
+//# sourceMappingURL=audit-CJl-wZ10.d.mts.map

package/dist/audit-CJl-wZ10.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-CJl-wZ10.d.mts","names":[],"sources":["../src/shared/plugin.ts","../src/types.ts","../src/audit.ts"],"mappings":";AAGA;AAAA,UAAiB,kBAAA;EACf,GAAA,EAAK,kBAAA;AAAA;;UAIU,uBAAA;EACf,MAAA,EAAQ,aAAA;EACR,OAAA;IACE,MAAA;IACA,IAAA;IACA,SAAA;EAAA;EAFA;EAKF,OAAA,GAAU,MAAA;AAAA;AAAA,UAGK,oBAAA,SAA6B,uBAAA;EAHlC;EAKV,KAAA,EAAO,SAAA;EACP,MAAA;EACA,UAAA;EACA,KAAA,GAAQ,KAAA;AAAA;;UAIO,gBAAA;EAT6B;EAW5C,OAAA,EAAS,MAAA;EACT,OAAA;IACE,MAAA;IACA,IAAA;EAAA;EAEF,OAAA,GAAU,MAAA;AAAA;;;;;AAPZ;;;;;;;;;;;;;AA6BA;;UAAiB,WAAA;EAID;EAFd,IAAA;EAIe;EAFf,KAAA,IAAS,GAAA,EAAK,kBAAA,YAA8B,OAAA;EAI9B;EAFd,MAAA,IAAU,GAAA,EAAK,aAAA,YAAyB,OAAA;EAI3B;EAFb,KAAA,IAAS,GAAA,EAAK,YAAA,YAAwB,OAAA;EAGf;EADvB,IAAA,IAAQ,GAAA,EAAK,mBAAA,YAA+B,OAAA;EAC5C,cAAA,IAAkB,GAAA,EAAK,uBAAA;EACvB,eAAA,IAAmB,GAAA,EAAK,oBAAA;EAOa;EALrC,WAAA,IAAe,GAAA,EAAK,gBAAA;EAZpB;;;;EAiBA,YAAA,IAAgB,MAAA,EAAQ,aAAA;AAAA;;iBAIV,YAAA,CAAa,MAAA,EAAQ,WAAA,GAAc,WAAA;;iBAKnC,WAAA,CAAY,IAAA,UAAc,KAAA,EAAO,WAAA,CAAY,WAAA,aAAwB,WAAA;;iBAKrE,cAAA,CAAe,IAAA,UAAc,MAAA,EAAQ,WAAA,CAAY,WAAA,cAAyB,WAAA;;;;;UAQzE,YAAA;EAAA,SACN,OAAA,WAAkB,WAAA;EA/BJ;EAAA,SAiCd,SAAA;EAAA,SACA,QAAA;EAAA,SACA,OAAA;EAAA,SACA,mBAAA;EAAA,SACA,YAAA;EAAA,SACA,eAAA;EACT,iBAAA,GAAoB,MAAA,EAAQ,aAAA;EAC5B,iBAAA,GAAoB,GAAA,EAAK,uBAAA;EACzB,kBAAA,GAAqB,GAAA,EAAK,oBAAA;EAC1B,SAAA,GAAY,GAAA,EAAK,aAAA,KAAkB,OAAA;EAlCE;EAoCrC,QAAA,GAAW,GAAA,EAAK,YAAA,KAAiB,OAAA;EACjC,OAAA,GAAU,GAAA,EAAK,mBAAA,KAAwB,OAAA;EACvC,cAAA,GAAiB,GAAA,EAAK,gBAAA;EACtB,QAAA,GAAW,GAAA,EAAK,kBAAA,KAAuB,OAAA;AAAA;;iBAQzB,kBAAA,CAAmB,OAAA,GAAS,WAAA,KAAqB,YAAA;;iBAiHjD,oBAAA,CAAA,GAAwB,YAAA;;;;YCzO5B,iBAAA;IDAuB;;;;AAKnC;;;;;;;;;ICSI,iBAAA,GAAoB,GAAA,EAAK,mBAAA,YAA+B,OAAA;IDD1D;;;;AAGF;;;;;;;ICWI,cAAA,GAAiB,GAAA,EAAK,aAAA,YAAyB,OAAA;IDXL;;;;;;;;;AAS9C;;;;;;;ICoBI,aAAA,GAAgB,GAAA,EAAK,YAAA,YAAwB,OAAA;EAAA;AAAA;AAAA;EAAA,UAKrC,iBAAA;IACR,iBAAA,GAAoB,GAAA,EAAK,mBAAA,YAA+B,OAAA;IACxD,cAAA,GAAiB,GAAA,EAAK,aAAA,YAAyB,OAAA;IAC/C,aAAA,GAAgB,GAAA,EAAK,YAAA,YAAwB,OAAA;EAAA;AAAA;;;;UAOhC,eAAA;EDEuB;;;;ECGtC,OAAA;EDGoB;;;;ECGpB,QAAA;EDbA;;;;ECmBA,WAAA,GAAc,kBAAA;AAAA;;;;UAMC,aAAA;EACf,SAAA;EACA,KAAA;EAAA,CACC,GAAA;AAAA;;;;;;;;UAUc,YAAA;ED5Bf;EC8BA,KAAA;ED9Be;ECgCf,QAAA,GAAW,MAAA;ED3Ba;;;;AAI1B;;;;ECgCE,QAAA,WAAmB,KAAA;EDhCQ;;;;AAK7B;ECiCE,WAAA;;EAEA,QAAA,GAAW,KAAA,EAAO,MAAA,GAAS,KAAA;AAAA;;;;UAMZ,aAAA;EDzCgC;EC2C/C,IAAA;ED3CwC;EC6CxC,IAAA;ED7C8F;EC+C9F,KAAA;ED1Cc;EC4Cd,KAAA;AAAA;;;;;UAOe,qBAAA;EDnDc;ECqD7B,MAAA;EDrD+D;ECuD/D,QAAA;EDvDwF;ECyDxF,IAAA;AAAA;ADjDF;;;;AAAA,UCwDiB,mBAAA;ED9CU;ECgDzB,MAAA;ED9CiB;ECgDjB,QAAA;ED9CgB;ECgDhB,IAAA;ED/Ce;ECiDf,MAAA;EDhDsB;ECkDtB,OAAA,EAAS,MAAA;EDjD8B;;;;ECsDvC,UAAA;AAAA;;;;;UAOe,aAAA;EDrEf;ECuEA,KAAA,EAAO,SAAA;EDvEa;ECyEpB,OAAA;IACE,MAAA;IACA,IAAA;IACA,SAAA;EAAA;ED1EmB;EC6ErB,OAAA,GAAU,MAAA;ED5EO;EC8EjB,QAAA;IACE,MAAA;IACA,OAAA,GAAU,MAAA;EAAA;AAAA;;;;;UAQG,YAAA;EDpFf;ECsFA,KAAA,EAAO,SAAA;EDtFU;ECwFjB,OAAA;IACE,MAAA;IACA,IAAA;IACA,SAAA;EAAA;ED1F4C;EC6F9C,OAAA,GAAU,MAAA;AAAA;;;;UAMK,cAAA;ED3FgD;;;AAiHjE;;;;;;;;ACqc0B;;;;;;;EAxcxB,KAAA,GAAQ,aAAA;EAzLuC;;;;;;;;;;;;;;;;;EA4M/C,IAAA,GAAO,qBAAA;AAAA;AA5M+C;;;AAAA,UAkNvC,WAAA;EA5M2C;EA8M1D,OAAA;AAAA;;;;UAMe,kBAAA;EArNL;EAuNV,OAAA;EAtN2B;EAwN3B,WAAA;EAxN0D;EA0N1D,OAAA;EAzNwB;EA2NxB,UAAA;EA3NiD;EA6NjD,MAAA;AAAA;;;;UAMe,YAAA;EAlOuC;AAOxD;;;;EAiOE,OAAA;EAtNA;EAwNA,GAAA,GAAM,OAAA,CAAQ,kBAAA;EAlNA;EAoNd,MAAA;EApNgC;EAsNhC,QAAA,GAAW,cAAA;EAhNiB;;;;;;EAuN5B,QAAA,GAAW,QAAA;EApNC;AAUd;;;;EAgNE,SAAA;EA3LkB;;;;;;;EAmMlB,MAAA;EA3MmB;;;;;;;;AAcrB;;;;;;;;;;AAeA;;;;;;;;;AAaA;;;;EAiME,MAAA,aAAmB,YAAA;EA7LnB;;;;;;;;AAkBF;;;;;;;;;;;;;;;;;;;;;;AAsBA;EAqLE,KAAA,IAAS,GAAA,EAAK,YAAA,YAAwB,OAAA;;;;;;;;;;;;;AArKxC;;;;;;;;;;AA4CA;;EAkJE,OAAA,GAAU,KAAA,CAzBmC,WAAA;EAvH7C;EAkJA,qBAAA;AAAA;;;;;;;;;UAWe,UAAA;EACf,IAAA;EACA,EAAA;EACA,WAAA;EACA,KAAA;EACA,KAAA;EACA,KAAA;EACA,MAAA;EACA,QAAA;AAAA;;;;;;;;UAUe,WAAA;EACf,IAAA;EACA,EAAA;EAAA,CACC,GAAA;AAAA;;;;;;;;;;;;;;;;;;AArBH;;;UA4CiB,WAAA;EA3Cf;EA6CA,MAAA;EACA,KAAA,EAAO,UAAA;EACP,MAAA,GAAS,WAAA;EACT,OAAA;EA3CA;EA6CA,MAAA;EA3CA;EA6CA,OAAA;IAAY,MAAA;IAAkB,KAAA;EAAA;;EAE9B,WAAA;EApCA;EAsCA,aAAA;EApCC;EAsCD,OAAA;EAtCY;EAwCZ,cAAA;EAjB0B;EAmB1B,OAAA;IACE,SAAA;IACA,OAAA;IACA,EAAA;IACA,SAAA;IACA,QAAA;IAAA,CACC,GAAA;EAAA;EAlBH;EAqBA,SAAA;EAnBY;EAqBZ,QAAA;EAnBA;EAqBA,IAAA;AAAA;;;;;;;UASe,aAAA;EACf,SAAA;EACA,KAAA;EACA,OAAA;EACA,WAAA;EACA,OAAA;EACA,UAAA;EACA,MAAA;EACA,KAAA,GAAQ,WAAA;AAAA;;;;KAME,SAAA,GAAY,aAAA,GAAgB,MAAA;;;;;KAM5B,WAAA,MAAiB,CAAA,SAAU,KAAA,YACnC,CAAA,GACA,CAAA,gCACgB,CAAA,IAAK,WAAA,CAAY,CAAA,CAAE,CAAA,OACjC,CAAA;;AAVN;;;UAgBiB,cAAA;EACf,MAAA;EACA,OAAA;EACA,WAAA,GAAc,eAAA;EAbO;EAerB,SAAA;EAfqC;EAiBrC,gBAAA;AAAA;;;;UAMe,eAAA;EACf,KAAA;EACA,OAAA;EACA,SAAA;AAAA;;;;;;;KASU,YAAA,oBAAgC,MAAA,qBAC1C,WAAA,CAAY,IAAA,CAAK,CAAA,QAAS,cAAA,KAAmB,cAAA;;;;;;AA1B/C;;;;;;;;;;;;AAaA;;;;;;;;;AAYA;;;;;;;;;UAsCiB,aAAA,oBAAiC,MAAA;EArCW;;;;;;;;EA8C3D,GAAA,GAAM,OAAA,EAAS,YAAA,CAAa,CAAA;EA9C+B;AAqC7D;;;;EAgBE,KAAA,GAAQ,KAAA,EAAO,KAAA,WAAgB,OAAA,GAAU,YAAA,CAAa,CAAA;EAPvC;;;;;EAcf,IAAA,GAAO,OAAA,UAAiB,OAAA,GAAU,YAAA,CAAa,CAAA;EAOA;;;;;EAA/C,IAAA,GAAO,OAAA,UAAiB,OAAA,GAAU,YAAA,CAAa,CAAA;EAc7B;;;;;;;EALlB,IAAA,GAAO,SAAA,GAAY,YAAA,CAAa,CAAA;IAAO,UAAA;EAAA,MAA2B,SAAA;EA9BtC;;;EAmC5B,UAAA,QAAkB,YAAA,CAAa,CAAA,IAAK,MAAA;EA5B5B;;;;;;;;;;;;;;;;;;;EAiDR,IAAA,IAAQ,KAAA,UAAe,EAAA,eAAiB,OAAA;EArBxC;;;;;;;;;;;;AAiDF;;;;;;;;;;EAJE,KAAA,GAAQ,iBAAA;AAAA;;UAIO,iBAAA;EAAA,CACd,KAAA,EAD+B,UAAA;EAEhC,IAAA,GAAO,MAAA,UAAgB,KAAA,EAAO,IAAA,CADM,UAAA;AAAA;AAOtC;;;AAAA,KAAY,QAAA;;AAWZ;;;;;;;;UAAiB,GAAA;EAMf;;;;;EAAA,IAAA,CAAK,GAAA,UAAa,OAAA;EAClB,IAAA,CAAK,KAAA,EAAO,MAAA;EAON;;;;;EAAN,KAAA,CAAM,GAAA,UAAa,OAAA;EACnB,KAAA,CAAM,KAAA,EAAO,MAAA;EAOK;;;;;EAAlB,IAAA,CAAK,GAAA,UAAa,OAAA;EAClB,IAAA,CAAK,KAAA,EAAO,MAAA;EAQZ;;;;;EADA,KAAA,CAAM,GAAA,UAAa,OAAA;EACnB,KAAA,CAAM,KAAA,EAAO,MAAA;AAAA;;;;UAME,YAAA;EAQf;EANA,OAAA;EAUA;EARA,MAAA;EAaA;EAXA,GAAA;EAWiB;EATjB,GAAA;EAee;EAbf,IAAA;;EAEA,KAAA,GAAQ,KAAA;EAYR;;;;EAPA,QAAA,GAAW,MAAA;AAAA;;;AAyBb;UAnBiB,oBAAA;EACf,MAAA;EACA,IAAA;EACA,SAAA;EAiBM;;;;;;;;;EAPN,SAAA,IAAa,OAAA,EAAS,OAAA;AAAA;;;;UAMP,cAAA;EACf,GAAA,GAAM,aAAA;EACN,SAAA;EACA,MAAA;EAcA;EAZA,eAAA;EAcA;EAZA,aAAA;EAcE;EAZF,gBAAA;EAAA,CACC,GAAA;AAAA;;;;UAMc,WAAA;EACf,MAAA;EACA,IAAA;EACA,OAAA,EAAS,cAAA;IAWT,yEATE,UAAA;MACE,OAAA;QACE,SAAA,GAAY,OAAA,EAAS,OAAA;MAAA;IAAA,GAaD;IATxB,SAAA,IAAa,OAAA,EAAS,OAAA;EAAA;EAExB,IAAA;IAAS,GAAA;MAAQ,UAAA;IAAA;EAAA;EACjB,QAAA,GAAW,QAAA;AAAA;;;;UAMI,WAAA;EACf,OAAA;EACA,MAAA;EACA,GAAA;EACA,GAAA;EACA,IAAA;EACA,GAAA;AAAA;;;ADzzBF;;;;AAAA,cEKa,oBAAA;AFAb;;;;;;;AAAA,UESiB,UAAA;EACf,MAAA;EACA,KAAA,EAAO,UAAA;EACP,MAAA,GAAS,WAAA;EACT,OAAA,GAAU,WAAA;EACV,MAAA;EACA,OAAA,GAAU,WAAA;EACV,WAAA;EACA,aAAA;EACA,OAAA;AAAA;;;;;;;;;iBAgEc,gBAAA,CAAiB,KAAA,EAAO,UAAA,GAAa,WAAA;;;;;AF9DrD;;;;;;;;;;;;;AA6BA;iBE6EgB,gBAAA,oBAAoC,MAAA,kBAAA,CAAyB,MAAA,EAAQ,aAAA,CAAc,CAAA,IAAK,eAAA,CAAgB,CAAA;;;;KA+B5G,eAAA,oBAAmC,MAAA,qBAA2B,aAAA,CAAc,CAAA;EAAO,KAAA,EAAO,WAAA,CAAY,CAAA;AAAA;;UAGjG,WAAA,oBAA+B,MAAA;EAAA,CAC7C,KAAA,EAAO,UAAA;EFrGe;;;;;EE2GvB,IAAA,GAAO,MAAA,UAAgB,KAAA,EAAO,IAAA,CAAK,UAAA;AAAA;;;;;;;;;;;;;;;;;;;;iBAsBrB,KAAA,CAAM,KAAA,EAAO,UAAA,GAAa,SAAA;;;;;;;;;;;AFrH1C;;;;;;;;;AAKA;;;;;iBEgJgB,SAAA,iBAAA,CACd,OAAA,EAAS,gBAAA,CAAiB,MAAA,GAC1B,EAAA,GAAK,KAAA,EAAO,MAAA,EAAQ,GAAA,EAAK,gBAAA,KAAqB,OAAA,CAAQ,OAAA,IAAW,OAAA,IAC/D,KAAA,EAAO,MAAA,EAAQ,GAAA,EAAK,gBAAA,KAAqB,OAAA,CAAQ,OAAA;;;;;;cAqCxC,gBAAA,SAAyB,KAAA;cAExB,MAAA;AAAA;;UAQG,gBAAA;EACf,MAAA;EACA,MAAA,GAAS,WAAA,KAAgB,KAAA,EAAO,MAAA,KAAW,WAAA;AAAA;;;;;UAO5B,gBAAA;EACf,KAAA,EAAO,UAAA;EACP,WAAA;EACA,aAAA;AAAA;;;AFjMF;;;;;;;;;;;;;;;;;iBEuNgB,SAAA,CACd,MAAA,WACA,KAAA,WACA,OAAA,GAAS,gBAAA;EACN,MAAA;EAAkB,KAAA;EAAiB,KAAA,EAAO,YAAA;AAAA;;UAkE9B,YAAA;EACf,EAAA;EACA,IAAA;EACA,KAAA;AAAA;;UAIe,gBAAA;EF1RU;EE4RzB,WAAA;EF3RA;EE6RA,WAAA;EF7RqB;EE+RrB,aAAA;EF9RiB;EEgSjB,YAAA;AAAA;;;;;;;;;;;;;;;;;;AFnRF;iBEwSgB,iBAAA,oDAAA,CACd,MAAA,UACA,OAAA;EAAY,MAAA,GAAS,WAAA;AAAA,IACpB,kBAAA,CAAmB,WAAA;;;;;KAkBV,kBAAA,4CACV,KAAA,EAAO,WAAA,kBACH,IAAA,CAAK,UAAA;EAAqC,MAAA,GAAS,IAAA,CAAK,WAAA;IAAyB,IAAA,GAAO,WAAA;EAAA;AAAA,IACxF,IAAA,CAAK,UAAA,gBACN,UAAA;;;;;ADqPqB;;;;;;;;;;;;;;;;;;;iBC5NV,SAAA,CAAA,GAAa,SAAA;;UAmBZ,SAAA;EACf,MAAA,EAAQ,WAAA;EACR,OAAA;EACA,gBAAA,GAAmB,OAAA,EAAS,YAAA;AAAA;;UAIb,YAAA;EACf,MAAA,YAAkB,MAAA;EAClB,OAAA,GAAU,WAAA;EACV,KAAA,GAAQ,OAAA,CAAQ,UAAA;EAChB,MAAA,GAAS,OAAA,CAAQ,WAAA;AAAA;;UAqDF,6BAAA;EDhfb;ECkfF,UAAA,GAAa,GAAA,EAAK,aAAA,KAAkB,OAAA,CAAQ,UAAA,uBAAiC,UAAA;AAAA;;UAI9D,oBAAA;EDtfuC;;AAOxD;;ECofE,QAAA,IAAY,GAAA,EAAK,aAAA;EDnee;;;;ECwehC,MAAA,GAAS,6BAAA;EDxeuB;EC0ehC,SAAA;AAAA;;;;;;;;;ADvdF;;;;;;;iBCyegB,aAAA,CAAc,OAAA,GAAS,oBAAA,IAA6B,GAAA,EAAK,aAAA,YAAyB,OAAA;;UAwCjF,gBAAA;ED7gBf;;;;;ECmhBA,KAAA;AAAA;;KAIU,OAAA,IAAW,GAAA,EAAK,YAAA,YAAwB,OAAA;;;ADhgBpD;;;;;;;;;;AAeA;;;;;;;;;AAaA;;;iBC8fgB,SAAA,CAAU,KAAA,EAAO,OAAA,EAAS,OAAA,GAAS,gBAAA,GAAwB,OAAA;;UAY1D,gBAAA;EDpgBf;ECsgBA,IAAA,QAAY,OAAA;EDlgBZ;ECogBA,IAAA,GAAO,IAAA,aAAiB,OAAA;AAAA;;KAId,aAAA;EACN,QAAA;EAAkB,MAAA;EAAgB,SAAA;AAAA;EAClC,QAAA;EAAwB,KAAA,GAAQ,gBAAA;EAAkB,SAAA;AAAA;;;;;;;;;;;;;;;ADxexD;;;;;;;;;;;;iBCogBgB,MAAA,CAAO,KAAA,EAAO,OAAA,EAAS,OAAA,EAAS,aAAA,GAAgB,OAAA;;ADpfhE;;;;;;;;;;AA4CA;;;;;cCgkBa,iBAAA,EAAmB,YAAA"}

package/dist/better-auth/index.d.mts

@@ -1,4 +1,4 @@
-import { Y as RequestLogger } from "../audit-CTIviX3P.mjs";
+import { Y as RequestLogger } from "../audit-CJl-wZ10.mjs";
 
 //#region src/better-auth/index.d.ts
 /**

package/dist/browser.d.mts

@@ -1,4 +1,4 @@
-import { F as DrainContext } from "./audit-CTIviX3P.mjs";
+import { F as DrainContext } from "./audit-CJl-wZ10.mjs";
 import { PipelineDrainFn } from "./pipeline.mjs";
 import { HttpDrainConfig, HttpLogDrainOptions } from "./http.mjs";
 

package/dist/define-D6OJdSUH.mjs

@@ -0,0 +1,63 @@
+//#region src/shared/define.ts
+/**
+* Identity helper for authoring an evlog configuration once and sharing it
+* across `initLogger` and framework middleware.
+*
+* @example
+* ```ts
+* export const config = defineEvlog({
+*   service: 'checkout',
+*   redact: true,
+*   sampling: { rates: { info: 25 } },
+*   enrich: createDefaultEnrichers(),
+*   plugins: [drainPlugin('axiom', createAxiomDrain())],
+* })
+*
+* initLogger(toLoggerConfig(config))
+* app.use(evlogMiddleware(config))
+* ```
+*/
+function defineEvlog(config) {
+	return config;
+}
+/**
+* Project an {@link EvlogConfig} onto the surface accepted by `initLogger`.
+* Strips middleware-only fields (`include`, `exclude`, `routes`, `enrich`,
+* `keep`); drains and plugins are preserved.
+*/
+function toLoggerConfig(config) {
+	const env = config.env ? { ...config.env } : config.service || config.environment ? {} : void 0;
+	if (env) {
+		if (config.service) env.service = config.service;
+		if (config.environment) env.environment = config.environment;
+	}
+	const out = {};
+	if (env) out.env = env;
+	if (config.enabled !== void 0) out.enabled = config.enabled;
+	if (config.pretty !== void 0) out.pretty = config.pretty;
+	if (config.sampling !== void 0) out.sampling = config.sampling;
+	if (config.minLevel !== void 0) out.minLevel = config.minLevel;
+	if (config.stringify !== void 0) out.stringify = config.stringify;
+	if (config.silent !== void 0) out.silent = config.silent;
+	if (config.redact !== void 0) out.redact = config.redact;
+	if (config.drain) out.drain = config.drain;
+	if (config.plugins) out.plugins = config.plugins;
+	return out;
+}
+/** Project an {@link EvlogConfig} onto the surface accepted by framework middleware. */
+function toMiddlewareOptions(config) {
+	const out = {};
+	if (config.include) out.include = config.include;
+	if (config.exclude) out.exclude = config.exclude;
+	if (config.routes) out.routes = config.routes;
+	if (config.drain) out.drain = config.drain;
+	if (config.enrich) out.enrich = config.enrich;
+	if (config.keep) out.keep = config.keep;
+	if (config.redact !== void 0) out.redact = config.redact;
+	if (config.plugins) out.plugins = config.plugins;
+	return out;
+}
+//#endregion
+export { toLoggerConfig as n, toMiddlewareOptions as r, defineEvlog as t };
+
+//# sourceMappingURL=define-D6OJdSUH.mjs.map

package/dist/define-D6OJdSUH.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-D6OJdSUH.mjs","names":[],"sources":["../src/shared/define.ts"],"sourcesContent":["import type { DrainContext, EnrichContext, EnvironmentContext, LoggerConfig, RedactConfig, SamplingConfig, TailSamplingContext } from '../types'\nimport type { BaseEvlogOptions } from './middleware'\nimport type { EvlogPlugin } from './plugin'\n\n/**\n * Single-config shape accepted everywhere evlog is bootstrapped: at\n * `initLogger`, in framework middleware, and in the Nuxt module. Authored\n * with {@link defineEvlog} and split via {@link toLoggerConfig} /\n * {@link toMiddlewareOptions}.\n */\nexport interface EvlogConfig extends BaseEvlogOptions {\n  service?: string\n  environment?: string\n  /** Full environment context override (advanced). */\n  env?: Partial<EnvironmentContext>\n  /** Enable or disable all logging globally. */\n  enabled?: boolean\n  /** Auto-detected from `NODE_ENV` when omitted. */\n  pretty?: boolean\n  sampling?: SamplingConfig\n  /** Suppress built-in console output (useful when drains own the channel). */\n  silent?: boolean\n  /** Emit JSON strings (default) or raw objects in non-pretty mode. */\n  stringify?: boolean\n  /** Minimum severity for the global `log` API. */\n  minLevel?: LoggerConfig['minLevel']\n}\n\n/**\n * Identity helper for authoring an evlog configuration once and sharing it\n * across `initLogger` and framework middleware.\n *\n * @example\n * ```ts\n * export const config = defineEvlog({\n *   service: 'checkout',\n *   redact: true,\n *   sampling: { rates: { info: 25 } },\n *   enrich: createDefaultEnrichers(),\n *   plugins: [drainPlugin('axiom', createAxiomDrain())],\n * })\n *\n * initLogger(toLoggerConfig(config))\n * app.use(evlogMiddleware(config))\n * ```\n */\nexport function defineEvlog<T extends EvlogConfig>(config: T): T {\n  return config\n}\n\n/**\n * Project an {@link EvlogConfig} onto the surface accepted by `initLogger`.\n * Strips middleware-only fields (`include`, `exclude`, `routes`, `enrich`,\n * `keep`); drains and plugins are preserved.\n */\nexport function toLoggerConfig(config: EvlogConfig): LoggerConfig {\n  const env: Partial<EnvironmentContext> | undefined = config.env\n    ? { ...config.env }\n    : config.service || config.environment\n      ? {}\n      : undefined\n  if (env) {\n    if (config.service) env.service = config.service\n    if (config.environment) env.environment = config.environment\n  }\n  const out: LoggerConfig = {}\n  if (env) out.env = env\n  if (config.enabled !== undefined) out.enabled = config.enabled\n  if (config.pretty !== undefined) out.pretty = config.pretty\n  if (config.sampling !== undefined) out.sampling = config.sampling\n  if (config.minLevel !== undefined) out.minLevel = config.minLevel\n  if (config.stringify !== undefined) out.stringify = config.stringify\n  if (config.silent !== undefined) out.silent = config.silent\n  if (config.redact !== undefined) out.redact = config.redact as boolean | RedactConfig | undefined\n  if (config.drain) out.drain = config.drain\n  if (config.plugins) out.plugins = config.plugins\n  return out\n}\n\n/** Project an {@link EvlogConfig} onto the surface accepted by framework middleware. */\nexport function toMiddlewareOptions<T extends BaseEvlogOptions>(config: EvlogConfig): T {\n  const out: BaseEvlogOptions = {}\n  if (config.include) out.include = config.include\n  if (config.exclude) out.exclude = config.exclude\n  if (config.routes) out.routes = config.routes\n  if (config.drain) out.drain = config.drain as (ctx: DrainContext) => void | Promise<void>\n  if (config.enrich) out.enrich = config.enrich as (ctx: EnrichContext) => void | Promise<void>\n  if (config.keep) out.keep = config.keep as (ctx: TailSamplingContext) => void | Promise<void>\n  if (config.redact !== undefined) out.redact = config.redact as boolean | RedactConfig | undefined\n  if (config.plugins) out.plugins = config.plugins as EvlogPlugin[]\n  return out as T\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA8CA,SAAgB,YAAmC,QAAc;AAC/D,QAAO;;;;;;;AAQT,SAAgB,eAAe,QAAmC;CAChE,MAAM,MAA+C,OAAO,MACxD,EAAE,GAAG,OAAO,KAAK,GACjB,OAAO,WAAW,OAAO,cACvB,EAAE,GACF,KAAA;AACN,KAAI,KAAK;AACP,MAAI,OAAO,QAAS,KAAI,UAAU,OAAO;AACzC,MAAI,OAAO,YAAa,KAAI,cAAc,OAAO;;CAEnD,MAAM,MAAoB,EAAE;AAC5B,KAAI,IAAK,KAAI,MAAM;AACnB,KAAI,OAAO,YAAY,KAAA,EAAW,KAAI,UAAU,OAAO;AACvD,KAAI,OAAO,WAAW,KAAA,EAAW,KAAI,SAAS,OAAO;AACrD,KAAI,OAAO,aAAa,KAAA,EAAW,KAAI,WAAW,OAAO;AACzD,KAAI,OAAO,aAAa,KAAA,EAAW,KAAI,WAAW,OAAO;AACzD,KAAI,OAAO,cAAc,KAAA,EAAW,KAAI,YAAY,OAAO;AAC3D,KAAI,OAAO,WAAW,KAAA,EAAW,KAAI,SAAS,OAAO;AACrD,KAAI,OAAO,WAAW,KAAA,EAAW,KAAI,SAAS,OAAO;AACrD,KAAI,OAAO,MAAO,KAAI,QAAQ,OAAO;AACrC,KAAI,OAAO,QAAS,KAAI,UAAU,OAAO;AACzC,QAAO;;;AAIT,SAAgB,oBAAgD,QAAwB;CACtF,MAAM,MAAwB,EAAE;AAChC,KAAI,OAAO,QAAS,KAAI,UAAU,OAAO;AACzC,KAAI,OAAO,QAAS,KAAI,UAAU,OAAO;AACzC,KAAI,OAAO,OAAQ,KAAI,SAAS,OAAO;AACvC,KAAI,OAAO,MAAO,KAAI,QAAQ,OAAO;AACrC,KAAI,OAAO,OAAQ,KAAI,SAAS,OAAO;AACvC,KAAI,OAAO,KAAM,KAAI,OAAO,OAAO;AACnC,KAAI,OAAO,WAAW,KAAA,EAAW,KAAI,SAAS,OAAO;AACrD,KAAI,OAAO,QAAS,KAAI,UAAU,OAAO;AACzC,QAAO"}

package/dist/define-Fp8TrdEB.d.mts

@@ -0,0 +1,57 @@
+import { G as LoggerConfig, L as EnvironmentContext, Q as SamplingConfig } from "./audit-CJl-wZ10.mjs";
+import { t as BaseEvlogOptions } from "./middleware-CGM-bOvE.mjs";
+
+//#region src/shared/define.d.ts
+/**
+ * Single-config shape accepted everywhere evlog is bootstrapped: at
+ * `initLogger`, in framework middleware, and in the Nuxt module. Authored
+ * with {@link defineEvlog} and split via {@link toLoggerConfig} /
+ * {@link toMiddlewareOptions}.
+ */
+interface EvlogConfig extends BaseEvlogOptions {
+  service?: string;
+  environment?: string;
+  /** Full environment context override (advanced). */
+  env?: Partial<EnvironmentContext>;
+  /** Enable or disable all logging globally. */
+  enabled?: boolean;
+  /** Auto-detected from `NODE_ENV` when omitted. */
+  pretty?: boolean;
+  sampling?: SamplingConfig;
+  /** Suppress built-in console output (useful when drains own the channel). */
+  silent?: boolean;
+  /** Emit JSON strings (default) or raw objects in non-pretty mode. */
+  stringify?: boolean;
+  /** Minimum severity for the global `log` API. */
+  minLevel?: LoggerConfig['minLevel'];
+}
+/**
+ * Identity helper for authoring an evlog configuration once and sharing it
+ * across `initLogger` and framework middleware.
+ *
+ * @example
+ * ```ts
+ * export const config = defineEvlog({
+ *   service: 'checkout',
+ *   redact: true,
+ *   sampling: { rates: { info: 25 } },
+ *   enrich: createDefaultEnrichers(),
+ *   plugins: [drainPlugin('axiom', createAxiomDrain())],
+ * })
+ *
+ * initLogger(toLoggerConfig(config))
+ * app.use(evlogMiddleware(config))
+ * ```
+ */
+declare function defineEvlog<T extends EvlogConfig>(config: T): T;
+/**
+ * Project an {@link EvlogConfig} onto the surface accepted by `initLogger`.
+ * Strips middleware-only fields (`include`, `exclude`, `routes`, `enrich`,
+ * `keep`); drains and plugins are preserved.
+ */
+declare function toLoggerConfig(config: EvlogConfig): LoggerConfig;
+/** Project an {@link EvlogConfig} onto the surface accepted by framework middleware. */
+declare function toMiddlewareOptions<T extends BaseEvlogOptions>(config: EvlogConfig): T;
+//#endregion
+export { toMiddlewareOptions as i, defineEvlog as n, toLoggerConfig as r, EvlogConfig as t };
+//# sourceMappingURL=define-Fp8TrdEB.d.mts.map

package/dist/define-Fp8TrdEB.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-Fp8TrdEB.d.mts","names":[],"sources":["../src/shared/define.ts"],"mappings":";;;;;;AAUA;;;;UAAiB,WAAA,SAAoB,gBAAA;EACnC,OAAA;EACA,WAAA;EAFmC;EAInC,GAAA,GAAM,OAAA,CAAQ,kBAAA;EAJqC;EAMnD,OAAA;EALA;EAOA,MAAA;EACA,QAAA,GAAW,cAAA;EALL;EAON,MAAA;EALA;EAOA,SAAA;EAJA;EAMA,QAAA,GAAW,YAAA;AAAA;;;;;;AAqBb;;;;;;;;;;;;;iBAAgB,WAAA,WAAsB,WAAA,CAAA,CAAa,MAAA,EAAQ,CAAA,GAAI,CAAA;;AAS/D;;;;iBAAgB,cAAA,CAAe,MAAA,EAAQ,WAAA,GAAc,YAAA;;iBAyBrC,mBAAA,WAA8B,gBAAA,CAAA,CAAkB,MAAA,EAAQ,WAAA,GAAc,CAAA"}

package/dist/{dist-Do8P4zWd.mjs → dist-BIlS38vi.mjs}

@@ -48,4 +48,4 @@ function parsePath(input = "") {
 //#endregion
 export { parseURL as t };
 
-//# sourceMappingURL=dist-Do8P4zWd.mjs.map
+//# sourceMappingURL=dist-BIlS38vi.mjs.map