jskelet 0.3.0 → 0.3.2

package/CHANGELOG.md

@@ -27,6 +27,12 @@ one is listed under a **Breaking** heading.
 
 ### Added
 
+- Top-level `logs` config for persistent sinks: daily NDJSON files
+  (`logs.file`) and batched S3 PutObject (`logs.s3`) with embedded SigV4 — no
+  `@aws-sdk` dependency. `kinds` selects `http` / `event` / `error`; `console`
+  toggles runtime stdout lines. Missing bucket/region/credentials warn and
+  disable the S3 sink without taking the site down. Env: `JSKELET_LOG_BUCKET`,
+  `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_SESSION_TOKEN`, `AWS_REGION`.
 - Admin panel pages under `/_jskelet/admin`: Overview, Cache, Routes, Views,
   Logs and System. Configurable `allowIps` (exact or CIDR), `blockBots` (default
   on — crawler UAs get 404 before login), and `logSize`. Live Logs use an
@@ -207,6 +213,11 @@ false`.
 
 ### Changed
 
+- Admin panel System meters (CPU, memory, disk) show this process's share of
+  the host — RSS and project disk footprint against machine totals, plus
+  process CPU across all cores — instead of whole-machine fullness. The panel
+  content width is wider (`1600px`) so Overview, Routes, Views and System use
+  the screen better.
 - The release history page in `examples/marketing` now shows one release at a
   time: the newest one is expanded and older releases collapse to a single
   header row with their date, status and change count. Every release used to be

package/docs/07-yapilandirma.md

@@ -752,6 +752,46 @@ redis: {
 }
 ```
 
+### `logs`
+
+Kalıcı log sink'leri. Varsayılan her şey kapalı: stdout ve admin paneli ring'i
+mevcut davranışını korur. Açıldığında HTTP access log ile framework olayları
+(`event` / `error`) NDJSON satırları olarak dosyaya ve/veya S3'e yazılır.
+
+| Alan | Tip | Varsayılan | Anlamı |
+| --- | --- | --- | --- |
+| `console` | `boolean` | `true` | Runtime `http` / `event` / `error` satırları stdout'a basılsın mı (banner/build satırları etkilenmez) |
+| `kinds` | `("http" \| "event" \| "error")[]` | hepsi | Sink'lere giden kayıt türleri |
+| `file.enabled` | `boolean` | `false` | Günlük dosya sink'i |
+| `file.dir` | `string` | `"logs"` | Proje köküne göre dizin; `jskelet-YYYY-MM-DD.log` |
+| `file.rotate` | `"daily"` | `"daily"` | Yalnızca günlük rotasyon |
+| `s3.enabled` | `boolean` | `false` | S3 batch PutObject sink'i |
+| `s3.bucket` | `string \| null` | `null` | Bucket; `JSKELET_LOG_BUCKET` ezer |
+| `s3.prefix` | `string` | `"jskelet/logs/"` | Nesne anahtarı öneki |
+| `s3.region` | `string \| null` | `null` | Bölge; verilmezse `AWS_REGION` / `AWS_DEFAULT_REGION` |
+| `s3.endpoint` | `string \| null` | `null` | MinIO vb. için path-style endpoint |
+| `s3.flushIntervalMs` | `number` | `5000` | Batch flush aralığı |
+| `s3.maxBatch` | `number` | `100` | Bu kadar satırda erken flush |
+
+S3 credential'ları config'e yazılmaz: `AWS_ACCESS_KEY_ID`,
+`AWS_SECRET_ACCESS_KEY`, isteğe bağlı `AWS_SESSION_TOKEN`. Bucket/region/
+credential eksikse uyarı basılır ve S3 sink kapanır; site ayağa kalkmaya devam
+eder. Framework `@aws-sdk` taşımaz — PutObject SigV4 ile gömülüdür.
+
+```js
+logs: {
+  console: true,
+  kinds: ["http", "error"],
+  file: { enabled: true, dir: "logs" },
+  s3: {
+    enabled: process.env.NODE_ENV === "production",
+    bucket: process.env.JSKELET_LOG_BUCKET,
+    prefix: "my-app/logs/",
+    region: process.env.AWS_REGION,
+  },
+}
+```
+
 ### `admin()`
 
 Framework yönetim paneli (`/_jskelet/admin`). Bellek içi / Redis / Cloudflare
@@ -933,6 +973,11 @@ basılmaz.
 | `JSKELET_SECRET` | `jskelet/cookies` | — | İmzalı cookie sırrı. `security.cookieSecret` verilmediğinde buradan okunur; ikisi de yoksa imzalı cookie API'si hata verir. [12](./12-panel-ve-oturum.md) |
 | `DEV_TOKEN` | `devGate`, `prewarm` | — | Ayarlıysa token taşımayan her isteğe 404 döner. Isıtma token'ı çerez olarak taşır. [09](./09-dev-araclari.md) |
 | `JSKELET_ADMIN` | `createApp` | — | Ayarlıysa yönetim panelini açar; `0` config'te açık olan paneli kapatır. Env config'i ezer, çünkü panel genelde bir arıza sırasında tek seferlik açılır. [06](./06-cache.md) |
+| `JSKELET_LOG_BUCKET` | `logs.s3` | — | S3 log bucket'ı; `logs.s3.bucket`'ı ezer |
+| `AWS_ACCESS_KEY_ID` | `logs.s3` | — | S3 PutObject imzası. Yoksa ve `s3.enabled` ise sink kapanır |
+| `AWS_SECRET_ACCESS_KEY` | `logs.s3` | — | S3 imza sırrı |
+| `AWS_SESSION_TOKEN` | `logs.s3` | — | Geçici credential'lar için isteğe bağlı |
+| `AWS_REGION` / `AWS_DEFAULT_REGION` | `logs.s3` | — | `logs.s3.region` verilmezse buradan okunur |
 | `JSKELET_CLOUDFLARE_KEY` | Cloudflare cache yüzeyi | — | API token. Verilene kadar CDN purge'ü ve edge analitiği kapalıdır; config'teki `apiToken`'ı ezer. Token hiçbir cevapta dönmez. [06](./06-cache.md) |
 | `JSKELET_CLOUDFLARE_ZONE_ID` | Cloudflare cache yüzeyi | — | Zone kimliği. Token'la birlikte verilmedikçe hiçbir Cloudflare ucu çağrılmaz |
 | `JSKELET_CLOUDFLARE_HOSTNAME` | Cloudflare cache yüzeyi | — | Purge URL'lerinin kökü. Panel iç bir adresten açılıyorsa gerekir |

package/docs/10-dagitim.md

@@ -47,6 +47,11 @@ ayarlamayı düşünmeniz gerekenler:
 | `PREWARM_MAX` | Site boyutuna göre | Açılışta ısıtılacak sayfa sayısı |
 | `PREWARM_INTERVAL_SECONDS` | `0` ya da uzun bir değer | Hiç ziyaret edilmeyen sayfaları sıcak tutmak isterseniz |
 | `DEV_TOKEN` | Yalnızca staging'de | Yayına açılmamış ortamı gizler |
+| `JSKELET_LOG_BUCKET` + `AWS_*` | Access log'u S3'e yazıyorsanız | `logs.s3` credential ve bucket; ayrıntı [07](./07-yapilandirma.md) |
+
+Production'da dosya veya S3 sink açıldığında HTTP access log middleware
+otomatik mount edilir (`logs.kinds` içinde `http` varsa). Admin paneli ring'i
+ayrıdır — disk/S3'e yazılan satırlar panele akmaz.
 
 Tam liste ve prewarm ayarlarının öncelik sırası:
 [07-yapilandirma.md](./07-yapilandirma.md).

package/docs/en/07-configuration.md

@@ -768,6 +768,46 @@ redis: {
 }
 ```
 
+### `logs`
+
+Persistent log sinks. Everything is off by default: stdout and the admin panel
+ring keep their current behaviour. When enabled, HTTP access logs and framework
+events (`event` / `error`) are written as NDJSON lines to a file and/or S3.
+
+| Field | Type | Default | Meaning |
+| --- | --- | --- | --- |
+| `console` | `boolean` | `true` | Whether runtime `http` / `event` / `error` lines go to stdout (banner/build lines are unaffected) |
+| `kinds` | `("http" \| "event" \| "error")[]` | all | Which kinds reach the sinks |
+| `file.enabled` | `boolean` | `false` | Daily file sink |
+| `file.dir` | `string` | `"logs"` | Directory relative to the project root; `jskelet-YYYY-MM-DD.log` |
+| `file.rotate` | `"daily"` | `"daily"` | Daily rotation only |
+| `s3.enabled` | `boolean` | `false` | S3 batch PutObject sink |
+| `s3.bucket` | `string \| null` | `null` | Bucket; `JSKELET_LOG_BUCKET` overrides |
+| `s3.prefix` | `string` | `"jskelet/logs/"` | Object key prefix |
+| `s3.region` | `string \| null` | `null` | Region; falls back to `AWS_REGION` / `AWS_DEFAULT_REGION` when unset |
+| `s3.endpoint` | `string \| null` | `null` | Path-style endpoint for MinIO etc. |
+| `s3.flushIntervalMs` | `number` | `5000` | Batch flush interval |
+| `s3.maxBatch` | `number` | `100` | Flush early after this many lines |
+
+S3 credentials are not written in the config: `AWS_ACCESS_KEY_ID`,
+`AWS_SECRET_ACCESS_KEY`, optional `AWS_SESSION_TOKEN`. Missing bucket/region/
+credentials warn and disable the S3 sink; the site still starts. The framework
+does not ship `@aws-sdk` — PutObject is embedded with SigV4.
+
+```js
+logs: {
+  console: true,
+  kinds: ["http", "error"],
+  file: { enabled: true, dir: "logs" },
+  s3: {
+    enabled: process.env.NODE_ENV === "production",
+    bucket: process.env.JSKELET_LOG_BUCKET,
+    prefix: "my-app/logs/",
+    region: process.env.AWS_REGION,
+  },
+}
+```
+
 ### `admin()`
 
 The framework admin panel (`/_jskelet/admin`). It manages the in-process /
@@ -954,6 +994,11 @@ and no warning is printed.
 | `JSKELET_SECRET` | `jskelet/cookies` | — | The signed cookie secret. Read when `security.cookieSecret` is not set; if neither exists, the signed cookie API throws. [12](./12-dashboards-and-sessions.md) |
 | `DEV_TOKEN` | `devGate`, `prewarm` | — | If set, every request without a token gets a 404. Prewarming carries the token as a cookie. [09](./09-dev-tools.md) |
 | `JSKELET_ADMIN` | `createApp` | — | When set, turns the admin panel on; `0` turns off a panel enabled in the config. The env wins because the panel is usually opened once during an incident. [06](./06-caching.md) |
+| `JSKELET_LOG_BUCKET` | `logs.s3` | — | S3 log bucket; overrides `logs.s3.bucket` |
+| `AWS_ACCESS_KEY_ID` | `logs.s3` | — | Signs S3 PutObject. Missing when `s3.enabled` disables the sink |
+| `AWS_SECRET_ACCESS_KEY` | `logs.s3` | — | S3 signing secret |
+| `AWS_SESSION_TOKEN` | `logs.s3` | — | Optional, for temporary credentials |
+| `AWS_REGION` / `AWS_DEFAULT_REGION` | `logs.s3` | — | Read when `logs.s3.region` is unset |
 | `JSKELET_CLOUDFLARE_KEY` | Cloudflare cache surface | — | API token. Until it is set, CDN purging and edge analytics stay off; it overrides `apiToken` in the config. The token is never returned in a response. [06](./06-caching.md) |
 | `JSKELET_CLOUDFLARE_ZONE_ID` | Cloudflare cache surface | — | Zone identifier. No Cloudflare endpoint is called unless it is set alongside the token |
 | `JSKELET_CLOUDFLARE_HOSTNAME` | Cloudflare cache surface | — | The root for purge URLs. Required when the panel is opened over an internal address |

package/docs/en/10-deployment.md

@@ -48,6 +48,11 @@ considering in production:
 | `PREWARM_MAX` | Depends on site size | Number of pages warmed at startup |
 | `PREWARM_INTERVAL_SECONDS` | `0` or a long value | If you want to keep never-visited pages warm |
 | `DEV_TOKEN` | Staging only | Hides an environment that is not public yet |
+| `JSKELET_LOG_BUCKET` + `AWS_*` | If you write access logs to S3 | `logs.s3` credentials and bucket; details in [07](./07-configuration.md) |
+
+When a file or S3 sink is enabled in production, the HTTP access log middleware
+mounts automatically (if `http` is in `logs.kinds`). The admin panel ring is
+separate — lines written to disk/S3 do not stream into the panel.
 
 The full list and the precedence order of the prewarm settings:
 [07-configuration.md](./07-configuration.md).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jskelet",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "A framework that feels like no framework: Express 5 + EJS server rendering, vanilla JS islands, Tailwind v4 and an in-process HTML TTL cache.",
   "type": "module",
   "license": "MIT",

package/src/client/admin/i18n.js

@@ -182,12 +182,16 @@ export const MESSAGES = {
 
     /* --- host --- */
     "host.section": "Host",
+    "host.cpu": "CPU",
     "host.memory": "Memory",
     "host.disk": "Disk",
     "host.noStats": "This platform does not report filesystem stats.",
-    "host.ramShared": "This process: {rss} RSS.",
-    "host.ramOnly": "This process holds the whole cache: {rss} RSS, {html} of it HTML.",
-    "host.diskNote": "{free} free on {path} — build output and logs live here.",
+    "host.cpuNote": "This process across {cores} cores (since last refresh).",
+    "host.ramShared": "This process: {rss} RSS · {heap} heap.",
+    "host.ramOnly":
+      "This process holds the whole cache: {rss} RSS · {heap} heap, {html} of it HTML.",
+    "host.diskNote":
+      "Project files on {path} (excluding node_modules) · {free} free on the volume.",
 
     /* --- işlemler --- */
     "actions.section": "Actions",
@@ -479,12 +483,16 @@ export const MESSAGES = {
     "cf.rowPurgeTitle": "Bu URL'i Cloudflare'de düşür",
 
     "host.section": "Makine",
+    "host.cpu": "CPU",
     "host.memory": "Bellek",
     "host.disk": "Disk",
     "host.noStats": "Bu platform dosya sistemi bilgisi vermiyor.",
-    "host.ramShared": "Bu süreç: {rss} RSS.",
-    "host.ramOnly": "Önbelleğin tamamı bu süreçte: {rss} RSS, {html} kadarı HTML.",
-    "host.diskNote": "{path} üzerinde {free} boş — build çıktısı ve loglar burada.",
+    "host.cpuNote": "Bu sürecin {cores} çekirdek üzerindeki payı (son yenilemeden beri).",
+    "host.ramShared": "Bu süreç: {rss} RSS · {heap} heap.",
+    "host.ramOnly":
+      "Önbelleğin tamamı bu süreçte: {rss} RSS · {heap} heap, {html} kadarı HTML.",
+    "host.diskNote":
+      "{path} üzerindeki proje dosyaları (node_modules hariç) · birimde {free} boş.",
 
     "actions.section": "İşlemler",
     "actions.target.placeholder": "/haber/:slug  ·  /haber/bir-yazi  ·  invalidation hedefi",

package/src/client/admin/panel.css

@@ -330,9 +330,14 @@ footer {
 }
 
 main {
-  max-width: 1180px;
+  width: 100%;
+  max-width: 1600px;
   margin: 0 auto;
-  padding: 20px;
+  padding: 20px 24px 28px;
+}
+
+.page {
+  width: 100%;
 }
 
 .cards {

package/src/client/admin/panel.html

@@ -437,6 +437,15 @@ JSKELET_CLOUDFLARE_ZONE_ID=your_zone_id</code></pre>
             <span class="count" id="host-heading">—</span>
           </h2>
           <div class="body">
+            <div class="meter">
+              <div class="meter-head">
+                <span data-i18n="host.cpu">CPU</span>
+                <span class="mono" id="cpu-text">—</span>
+              </div>
+              <div class="bar"><span id="cpu-bar"></span></div>
+              <p class="hint m0" id="cpu-note">—</p>
+            </div>
+
             <div class="meter">
               <div class="meter-head">
                 <span data-i18n="host.memory">Memory</span>

package/src/client/admin/panel.js

@@ -591,9 +591,8 @@ function renderRedis(redis, state) {
 }
 
 /**
- * Makinenin RAM ve disk durumu. Paylaşımlı kademe kapalıyken önbelleğin
- * tamamı bu sürecin belleğinde yaşıyor; `maxEntries` ile RAM arasındaki
- * ilişkiyi görmeden ayar yapmak körlemesine oluyor.
+ * System sayfası: çubuklar bu sürecin makine kapasitesindeki payı
+ * (CPU / RSS / proje diski), host'un genel doluluğu değil.
  *
  * @param {any} host
  * @param {any} proc
@@ -608,14 +607,24 @@ function renderHost(host, proc, redis) {
     .filter(Boolean)
     .join(" · ");
 
-  const ramUsed = host.memory.used / host.memory.total;
+  // Çubuklar makine doluluğunu değil, **bu sürecin** payını gösterir.
+  const cpuPercent = Number(proc.cpuPercent) || 0;
+  $("cpu-text").textContent = `${cpuPercent.toFixed(1)}%`;
+  meter("cpu-bar", cpuPercent / 100);
+  $("cpu-note").textContent = t("host.cpuNote", { cores: host.cpus });
+
+  const ramRatio = host.memory.total > 0 ? proc.memory.rss / host.memory.total : 0;
   $("ram-text").textContent =
-    `${formatBytes(host.memory.used)} / ${formatBytes(host.memory.total)}`;
-  meter("ram-bar", ramUsed);
+    `${formatBytes(proc.memory.rss)} / ${formatBytes(host.memory.total)}`;
+  meter("ram-bar", ramRatio);
   $("ram-note").textContent = redis.connected
-    ? t("host.ramShared", { rss: formatBytes(proc.memory.rss) })
+    ? t("host.ramShared", {
+        rss: formatBytes(proc.memory.rss),
+        heap: formatBytes(proc.memory.heapUsed),
+      })
     : t("host.ramOnly", {
         rss: formatBytes(proc.memory.rss),
+        heap: formatBytes(proc.memory.heapUsed),
         html: formatBytes(latest.html.bytes),
       });
 
@@ -626,11 +635,11 @@ function renderHost(host, proc, redis) {
     return;
   }
 
-  const diskUsed = (host.disk.total - host.disk.free) / host.disk.total;
+  const appDisk = Number(proc.diskBytes) || 0;
+  const diskRatio = host.disk.total > 0 ? appDisk / host.disk.total : 0;
   $("disk-text").textContent =
-    `${formatBytes(host.disk.total - host.disk.free)} / ${formatBytes(host.disk.total)}`;
-  meter("disk-bar", diskUsed);
-  // Önbellek diske yazılmıyor; disk build çıktısı ve log için önemli.
+    `${formatBytes(appDisk)} / ${formatBytes(host.disk.total)}`;
+  meter("disk-bar", diskRatio);
   $("disk-note").textContent = t("host.diskNote", {
     free: formatBytes(host.disk.free),
     path: host.disk.path,

package/src/config/defaults.js

@@ -191,6 +191,44 @@ export const DEFAULT_REDIS = {
   commandTimeoutMs: 200,
 };
 
+/**
+ * Kalıcı log sink'leri (dosya + S3).
+ *
+ * Varsayılan her şey kapalı: stdout ve admin ring mevcut davranışını korur.
+ * `kinds` hangi structured kayıtların sink'lere gideceğini seçer; `console`
+ * runtime `http`/`event`/`error` satırlarının terminalde görünmesini kontrol
+ * eder (banner/build satırlarına dokunmaz).
+ *
+ * S3 credential'ları config'e yazılmaz — `AWS_ACCESS_KEY_ID` /
+ * `AWS_SECRET_ACCESS_KEY` (ve isteğe bağlı `AWS_SESSION_TOKEN`). Bucket için
+ * `JSKELET_LOG_BUCKET` env'i config'i ezer.
+ */
+export const DEFAULT_LOGS = {
+  console: true,
+  /** @type {Array<"http" | "event" | "error">} */
+  kinds: ["http", "event", "error"],
+  file: {
+    enabled: false,
+    /** Proje köküne göre relative. */
+    dir: "logs",
+    /** Yalnızca günlük rotasyon. */
+    rotate: /** @type {"daily"} */ ("daily"),
+  },
+  s3: {
+    enabled: false,
+    /** @type {string | null} */
+    bucket: null,
+    prefix: "jskelet/logs/",
+    /** @type {string | null} */
+    region: null,
+    /** MinIO vb. için; null → AWS. */
+    /** @type {string | null} */
+    endpoint: null,
+    flushIntervalMs: 5000,
+    maxBatch: 100,
+  },
+};
+
 /**
  * Framework yönetim paneli (`/_jskelet/admin`).
  *

package/src/config/index.js

@@ -19,9 +19,10 @@
  *                   query?: { [source]: string[] | true }, maxEntries?: number,
  *                   data?: {...}, redis?: {...}, prewarm?: {...} }
  *   admin()     → { enabled?, basePath?, allowIps?, blockBots?, … }
+ *   logs        → { console?, kinds?, file?, s3? }
  *
  * Fonksiyon olmayan bölümler (`brand`, `security`, `static`, `navigation`…)
- * düz nesne olarak okunur.
+ * düz nesne olarak okunur. `logs` fonksiyon ya da düz nesne olabilir.
  */
 import fs from "node:fs";
 import path from "node:path";
@@ -36,6 +37,7 @@ import {
   DEFAULT_DEV_GATE_BYPASS,
   DEFAULT_DIRS,
   DEFAULT_HTML_CACHE_MAX_ENTRIES,
+  DEFAULT_LOGS,
   DEFAULT_NAVIGATION,
   DEFAULT_NAVIGATION_EXCLUDE,
   DEFAULT_PREWARM,
@@ -75,6 +77,19 @@ const CONFIG_FILE = "jskelet.config.mjs";
  * @property {number} commandTimeoutMs
  */
 
+/**
+ * @typedef {"http" | "event" | "error"} LogKind
+ *
+ * @typedef {object} LogsConfig
+ * @property {boolean} console Runtime http/event/error satırları stdout'a
+ *   basılsın mı (banner/build satırları etkilenmez).
+ * @property {LogKind[]} kinds Sink'lere giden kayıt türleri.
+ * @property {{ enabled: boolean, dir: string, rotate: "daily" }} file
+ * @property {{ enabled: boolean, bucket: string | null, prefix: string,
+ *   region: string | null, endpoint: string | null, flushIntervalMs: number,
+ *   maxBatch: number }} s3
+ */
+
 /**
  * @typedef {import('./pattern.js').CompiledPattern} CompiledPattern
  *
@@ -96,6 +111,7 @@ const CONFIG_FILE = "jskelet.config.mjs";
  * @property {{ attempts: number, delayMs: number }} transientRetry
  * @property {RedisConfig} redis Opsiyonel Redis ikinci kademesi.
  * @property {typeof DEFAULT_UPSTREAM_LIMIT} upstream Upstream hız freni.
+ * @property {LogsConfig} logs Kalıcı log sink'leri (dosya + S3).
  * @property {typeof DEFAULT_ADMIN} admin Framework yönetim paneli.
  * @property {typeof DEFAULT_CLOUDFLARE} cloudflare Cloudflare cache yüzeyi.
  * @property {Record<string, unknown>} prewarm
@@ -384,6 +400,77 @@ function normalizeCloudflare(raw) {
   };
 }
 
+const LOG_KINDS = new Set(["http", "event", "error"]);
+
+/**
+ * Kalıcı log sink'leri. Bozuk bir `kinds` listesi siteyi düşürmemeli —
+ * bilinmeyen girdiler atılır; hiç geçerli tür kalmazsa varsayılana dönülür.
+ *
+ * @param {unknown} raw
+ * @returns {LogsConfig}
+ */
+export function normalizeLogs(raw) {
+  const source = /** @type {Record<string, any>} */ (raw ?? {});
+  const fileRaw = /** @type {Record<string, any>} */ (source.file ?? {});
+  const s3Raw = /** @type {Record<string, any>} */ (source.s3 ?? {});
+
+  /** @type {LogKind[]} */
+  let kinds = DEFAULT_LOGS.kinds;
+  if (Array.isArray(source.kinds)) {
+    const filtered = source.kinds.filter(
+      (entry) => typeof entry === "string" && LOG_KINDS.has(entry),
+    );
+    if (filtered.length) kinds = /** @type {LogKind[]} */ ([...new Set(filtered)]);
+    else {
+      console.warn(
+        "[config] logs.kinds has no valid entries (http|event|error), using defaults",
+      );
+    }
+  } else if (source.kinds != null) {
+    console.warn("[config] logs.kinds must be an array, using defaults");
+  }
+
+  const flush = Number(s3Raw.flushIntervalMs);
+  const batch = Number(s3Raw.maxBatch);
+
+  /** @param {unknown} value */
+  const text = (value) => (typeof value === "string" && value ? value : null);
+
+  const envBucket = process.env.JSKELET_LOG_BUCKET;
+  const envRegion = process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION;
+
+  return {
+    console: source.console !== false,
+    kinds,
+    file: {
+      enabled: fileRaw.enabled === true,
+      dir:
+        typeof fileRaw.dir === "string" && fileRaw.dir.trim()
+          ? fileRaw.dir.trim()
+          : DEFAULT_LOGS.file.dir,
+      rotate: "daily",
+    },
+    s3: {
+      enabled: s3Raw.enabled === true,
+      bucket: text(envBucket) ?? text(s3Raw.bucket),
+      prefix:
+        typeof s3Raw.prefix === "string" && s3Raw.prefix
+          ? s3Raw.prefix
+          : DEFAULT_LOGS.s3.prefix,
+      region: text(s3Raw.region) ?? text(envRegion),
+      endpoint: text(s3Raw.endpoint),
+      flushIntervalMs:
+        Number.isFinite(flush) && flush >= 500
+          ? Math.min(60_000, Math.floor(flush))
+          : DEFAULT_LOGS.s3.flushIntervalMs,
+      maxBatch:
+        Number.isFinite(batch) && batch >= 1
+          ? Math.min(5000, Math.floor(batch))
+          : DEFAULT_LOGS.s3.maxBatch,
+    },
+  };
+}
+
 /**
  * `cache().query` → yol deseni başına, cache anahtarına girmesine izin verilen
  * query parametreleri.
@@ -680,12 +767,13 @@ export async function loadConfig(options = {}) {
     }
   };
 
-  const [headers, redirects, rewrites, cache, admin] = await Promise.all([
+  const [headers, redirects, rewrites, cache, admin, logs] = await Promise.all([
     section("headers"),
     section("redirects"),
     section("rewrites"),
     section("cache"),
     section("admin"),
+    section("logs"),
   ]);
 
   const {
@@ -721,6 +809,7 @@ export async function loadConfig(options = {}) {
     transientRetry,
     redis,
     upstream,
+    logs: normalizeLogs(logs),
     admin: normalizeAdmin(admin),
     cloudflare,
     prewarm,

package/src/log.mjs

@@ -18,6 +18,28 @@ const isTTY = Boolean(stream.isTTY);
 const useColor =
   !process.env.NO_COLOR && (isTTY || process.env.JSKELET_COLOR === "1");
 
+/**
+ * Runtime olaylarının (`http` / `event` / `errorBox`) stdout'a basılıp
+ * basılmayacağı. Banner ve build satırları etkilenmez — onlar başlangıç
+ * çıktısıdır, access log değil.
+ */
+let consoleEnabled = true;
+
+/**
+ * `http` kayıtlarının `emitLog` ile abonelere gidip gitmeyeceği. Access
+ * middleware mount edildiğinde kapatılır: aksi hâlde devtools + middleware
+ * aynı isteği iki kez sink'e yazar.
+ */
+let emitHttp = true;
+
+/**
+ * @param {{ console?: boolean, emitHttp?: boolean }} [options]
+ */
+export function configureLog(options = {}) {
+  if (options.console !== undefined) consoleEnabled = options.console !== false;
+  if (options.emitHttp !== undefined) emitHttp = options.emitHttp !== false;
+}
+
 /**
  * @param {string} open
  * @returns {(text: string) => string}
@@ -245,14 +267,16 @@ export function ready({ elapsed, url, watching, label = "Ready" }) {
  * @param {{ symbol?: string, scope: string, message: string, note?: string, time?: number | null }} info
  */
 export function event({ symbol = symbols.ok, scope, message, note, time = null }) {
-  const body = `${message}${note ? `  ${note}` : ""}`;
-  const padding = " ".repeat(Math.max(1, DETAIL - body.length));
+  if (consoleEnabled) {
+    const body = `${message}${note ? `  ${note}` : ""}`;
+    const padding = " ".repeat(Math.max(1, DETAIL - body.length));
 
-  write(
-    `${c.gray(clock())}  ${symbol} ${c.bold(scope.padEnd(10))} ` +
-    `${message}${note ? `  ${c.dim(note)}` : ""}${padding}` +
-    `${c.gray((time == null ? "" : ms(time)).padStart(TIME))}\n`,
-  );
+    write(
+      `${c.gray(clock())}  ${symbol} ${c.bold(scope.padEnd(10))} ` +
+      `${message}${note ? `  ${c.dim(note)}` : ""}${padding}` +
+      `${c.gray((time == null ? "" : ms(time)).padStart(TIME))}\n`,
+    );
+  }
 
   emitLog({
     kind: "event",
@@ -270,24 +294,28 @@ export function event({ symbol = symbols.ok, scope, message, note, time = null }
  * @param {{ method: string, url: string, status: number, ms: number, cache?: string | null }} info
  */
 export function http(info) {
-  const tint =
-    info.status >= 500 ? c.red : info.status >= 400 ? c.yellow : c.green;
-
-  write(
-    `${c.gray(clock())}  ${c.bold(info.method.padEnd(6))}` +
-    `${c.gray(truncate(info.url, 28).padEnd(30))}` +
-    `${tint(String(info.status))} ${c.gray(ms(info.ms).padStart(TIME))}` +
-    `${info.cache === "HIT" ? ` ${c.dim("cached")}` : ""}\n`,
-  );
+  if (consoleEnabled) {
+    const tint =
+      info.status >= 500 ? c.red : info.status >= 400 ? c.yellow : c.green;
 
-  emitLog({
-    kind: "http",
-    method: info.method,
-    url: info.url,
-    status: info.status,
-    ms: info.ms,
-    cache: info.cache ?? null,
-  });
+    write(
+      `${c.gray(clock())}  ${c.bold(info.method.padEnd(6))}` +
+      `${c.gray(truncate(info.url, 28).padEnd(30))}` +
+      `${tint(String(info.status))} ${c.gray(ms(info.ms).padStart(TIME))}` +
+      `${info.cache === "HIT" ? ` ${c.dim("cached")}` : ""}\n`,
+    );
+  }
+
+  if (emitHttp) {
+    emitLog({
+      kind: "http",
+      method: info.method,
+      url: info.url,
+      status: info.status,
+      ms: info.ms,
+      cache: info.cache ?? null,
+    });
+  }
 }
 
 /**
@@ -333,27 +361,29 @@ export function box({ title, lines, tint = c.cyan }) {
  * @param {{ title: string, name: string, message: string, lines?: string[] }} info
  */
 export function errorBox({ title, name, message, lines = [] }) {
-  const top = `┌─ ${title} ${"─".repeat(Math.max(0, BOX - title.length - 3))}┐`;
-  const bottom = `└${"─".repeat(BOX)}┘`;
-
-  /** @param {string} text @param {(value: string) => string} [tint] */
-  const line = (text, tint = (value) => value) => {
-    const clipped = truncate(text, BOX - 4);
-    write(
-      `${c.red("│")}  ${tint(clipped)}${" ".repeat(BOX - 4 - clipped.length)}  ${c.red("│")}\n`,
-    );
-  };
-
-  write(`\n${c.red(top)}\n`);
-  line("");
-  line(name, (value) => c.bold(c.red(value)));
-  for (const part of wrap(message, BOX - 4)) line(part);
-  if (lines.length) {
+  if (consoleEnabled) {
+    const top = `┌─ ${title} ${"─".repeat(Math.max(0, BOX - title.length - 3))}┐`;
+    const bottom = `└${"─".repeat(BOX)}┘`;
+
+    /** @param {string} text @param {(value: string) => string} [tint] */
+    const line = (text, tint = (value) => value) => {
+      const clipped = truncate(text, BOX - 4);
+      write(
+        `${c.red("│")}  ${tint(clipped)}${" ".repeat(BOX - 4 - clipped.length)}  ${c.red("│")}\n`,
+      );
+    };
+
+    write(`\n${c.red(top)}\n`);
+    line("");
+    line(name, (value) => c.bold(c.red(value)));
+    for (const part of wrap(message, BOX - 4)) line(part);
+    if (lines.length) {
+      line("");
+      for (const part of lines) line(part, c.gray);
+    }
     line("");
-    for (const part of lines) line(part, c.gray);
+    write(`${c.red(bottom)}\n\n`);
   }
-  line("");
-  write(`${c.red(bottom)}\n\n`);
 
   emitLog({
     kind: "error",