logixia 2.0.11 → 2.2.0

package/dist/sensitive-names-BiBM6R1X.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-names-BiBM6R1X.mjs","names":[],"sources":["../src/utils/sensitive-names.ts"],"sourcesContent":["/**\n * The one list of sensitive names. Log redaction (redact.utils), the HTTP logger\n * middleware and transport secret handling (transports/secret-config) all read it,\n * so the lists cannot drift. No imports: safe from any module, including browser code.\n */\n\n/** Field names redacted by name, wherever they appear in logged data. */\nexport const SENSITIVE_KEY_NAMES: readonly string[] = [\n  'password',\n  'passwd',\n  'secret',\n  'token',\n  'apiKey',\n  'api_key',\n  'accessToken',\n  'access_token',\n  'refreshToken',\n  'refresh_token',\n  'authorization',\n  'credentials',\n  'privateKey',\n  'private_key',\n  'clientSecret',\n  'client_secret',\n  'cookie',\n  'set-cookie',\n  'x-api-key',\n  'session',\n  'proxy-authorization',\n  'x-auth-token',\n  'x-access-token',\n  'aws_secret_access_key',\n  'awsSecretAccessKey',\n  'secretAccessKey',\n];\n\n/**\n * Extra names that only mean \"secret\" inside transport configuration, where\n * short words like `key` or `signature` are credentials, not log fields.\n */\nexport const TRANSPORT_CONFIG_SECRET_NAMES: readonly string[] = [\n  'writeKey',\n  'apiSecret',\n  'connectionString',\n  'sessionToken',\n  'passphrase',\n  'signature',\n  'pwd',\n  'pfx',\n  'cert',\n  'key',\n  'auth',\n];\n\n/** Request headers whose values are never logged. */\nexport const DEFAULT_REDACT_HEADERS: readonly string[] = [\n  'authorization',\n  'cookie',\n  'set-cookie',\n  'x-api-key',\n  'proxy-authorization',\n  'x-auth-token',\n  'x-access-token',\n  'x-csrf-token',\n  'x-amz-security-token',\n];\n\n/** Query-string parameters whose values are never logged. */\nexport const DEFAULT_REDACT_QUERY_PARAMS: readonly string[] = [\n  'token',\n  'access_token',\n  'refresh_token',\n  'code',\n  'password',\n  'secret',\n  'api_key',\n  'apikey',\n  'key',\n  'signature',\n  'sig',\n  'auth',\n  'accesstoken',\n  'refreshtoken',\n  'id_token',\n  'idtoken',\n  'client_secret',\n  'clientsecret',\n  'session',\n  'sessionid',\n  'session_id',\n  'jwt',\n  'auth_token',\n  'authtoken',\n  'api-key',\n  'x-api-key',\n  'x-amz-signature',\n  'x-amz-credential',\n  'x-amz-security-token',\n  'x-goog-signature',\n  'x-goog-credential',\n  'access-token',\n  'x-access-token',\n  'x-auth-token',\n  'apitoken',\n  'api_token',\n];\n\nfunction safeDecode(value: string): string {\n  try {\n    return decodeURIComponent(value.replace(/\\+/g, ' '));\n  } catch {\n    return value;\n  }\n}\n\n/** Replace the values of sensitive query parameters, leaving the rest verbatim. */\nexport function redactUrlQuery(url: string, redactParams: ReadonlySet<string>): string {\n  const q = url.indexOf('?');\n  if (q === -1) return url;\n  const hashAt = url.indexOf('#', q);\n  const query = url.slice(q + 1, hashAt === -1 ? undefined : hashAt);\n  const hash = hashAt === -1 ? '' : url.slice(hashAt);\n  const cleaned = query\n    .split('&')\n    .map((pair) => {\n      const eq = pair.indexOf('=');\n      const rawKey = eq === -1 ? pair : pair.slice(0, eq);\n      const decoded = safeDecode(rawKey);\n      const bracket = decoded.indexOf('[');\n      const name = (bracket === -1 ? decoded : decoded.slice(0, bracket)).toLowerCase();\n      return redactParams.has(name) && eq !== -1 ? `${rawKey}=[REDACTED]` : pair;\n    })\n    .join('&');\n  return `${url.slice(0, q)}?${cleaned}${hash}`;\n}\n\n/** Lower-cased lookup set of the default names plus any extras. */\nexport function buildNameSet(\n  defaults: readonly string[],\n  extra: readonly string[] | undefined\n): Set<string> {\n  return new Set([...defaults, ...(extra ?? [])].map((n) => n.toLowerCase()));\n}\n\nconst REDACTED = '[REDACTED]';\nconst MIN_SCRUB_LENGTH = 3;\n\nfunction queryNameOf(rawKey: string): string {\n  const decoded = safeDecode(rawKey);\n  const bracket = decoded.indexOf('[');\n  return (bracket === -1 ? decoded : decoded.slice(0, bracket)).toLowerCase();\n}\n\n/**\n * Raw and decoded values of sensitive query parameters present in this URL.\n * Values shorter than 3 characters or already `[REDACTED]` are ignored.\n */\nexport function sensitiveQueryValues(url: string, names: ReadonlySet<string>): string[] {\n  const q = url.indexOf('?');\n  if (q === -1) return [];\n  const hashAt = url.indexOf('#', q);\n  const query = url.slice(q + 1, hashAt === -1 ? undefined : hashAt);\n  const found = new Set<string>();\n  for (const pair of query.split('&')) {\n    const eq = pair.indexOf('=');\n    if (eq === -1 || !names.has(queryNameOf(pair.slice(0, eq)))) continue;\n    const raw = pair.slice(eq + 1);\n    for (const value of [raw, safeDecode(raw)]) {\n      if (value.length >= MIN_SCRUB_LENGTH && value !== REDACTED) found.add(value);\n    }\n  }\n  return [...found];\n}\n\n/** Replace every literal occurrence of `values` in `text` with `[REDACTED]`. */\nexport function scrubValues(text: string, values: readonly string[]): string {\n  if (values.length === 0 || text.length === 0) return text;\n  let out = text;\n  for (const value of [...values].sort((a, b) => b.length - a.length)) {\n    if (value.length > 0 && out.includes(value)) out = out.split(value).join(REDACTED);\n  }\n  return out;\n}\n\nfunction isUrlTerminator(ch: string): boolean {\n  return (\n    ch === ' ' ||\n    ch === '\\n' ||\n    ch === '\\r' ||\n    ch === '\\t' ||\n    ch === '\"' ||\n    ch === \"'\" ||\n    ch === '`'\n  );\n}\n\n/**\n * Redact sensitive query values in every `?query` found inside free text (an\n * error message, a stack line). Scans for `?` and cuts at whitespace or a quote.\n */\nexport function redactUrlsInText(text: string, names: ReadonlySet<string>): string {\n  let q = text.indexOf('?');\n  if (q === -1) return text;\n  let out = '';\n  let cursor = 0;\n  while (q !== -1) {\n    let end = q + 1;\n    while (end < text.length && !isUrlTerminator(text.charAt(end))) end++;\n    out += text.slice(cursor, q) + redactUrlQuery(text.slice(q, end), names);\n    cursor = end;\n    q = text.indexOf('?', end);\n  }\n  return out + text.slice(cursor);\n}\n\n/** Shape-preserving URL redaction plus literal scrubbing of this request's secret values. */\nexport function sanitizeText(\n  text: string,\n  names: ReadonlySet<string>,\n  values: readonly string[]\n): string {\n  return scrubValues(redactUrlsInText(text, names), values);\n}\n"],"mappings":";;;;;;;AAOA,MAAa,sBAAyC;CACpD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;;AAMA,MAAa,gCAAmD;CAC9D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,8BAAiD;CAC5D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI;EACF,OAAO,mBAAmB,MAAM,QAAQ,OAAO,GAAG,CAAC;CACrD,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,eAAe,KAAa,cAA2C;CACrF,MAAM,IAAI,IAAI,QAAQ,GAAG;CACzB,IAAI,MAAM,IAAI,OAAO;CACrB,MAAM,SAAS,IAAI,QAAQ,KAAK,CAAC;CACjC,MAAM,QAAQ,IAAI,MAAM,IAAI,GAAG,WAAW,KAAK,KAAA,IAAY,MAAM;CACjE,MAAM,OAAO,WAAW,KAAK,KAAK,IAAI,MAAM,MAAM;CAClD,MAAM,UAAU,MACb,MAAM,GAAG,CAAC,CACV,KAAK,SAAS;EACb,MAAM,KAAK,KAAK,QAAQ,GAAG;EAC3B,MAAM,SAAS,OAAO,KAAK,OAAO,KAAK,MAAM,GAAG,EAAE;EAClD,MAAM,UAAU,WAAW,MAAM;EACjC,MAAM,UAAU,QAAQ,QAAQ,GAAG;EACnC,MAAM,QAAQ,YAAY,KAAK,UAAU,QAAQ,MAAM,GAAG,OAAO,EAAA,CAAG,YAAY;EAChF,OAAO,aAAa,IAAI,IAAI,KAAK,OAAO,KAAK,GAAG,OAAO,eAAe;CACxE,CAAC,CAAC,CACD,KAAK,GAAG;CACX,OAAO,GAAG,IAAI,MAAM,GAAG,CAAC,EAAE,GAAG,UAAU;AACzC;;AAGA,SAAgB,aACd,UACA,OACa;CACb,OAAO,IAAI,IAAI,CAAC,GAAG,UAAU,GAAI,SAAS,CAAC,CAAE,CAAC,CAAC,KAAK,MAAM,EAAE,YAAY,CAAC,CAAC;AAC5E;AAEA,MAAM,WAAW;AACjB,MAAM,mBAAmB;AAEzB,SAAS,YAAY,QAAwB;CAC3C,MAAM,UAAU,WAAW,MAAM;CACjC,MAAM,UAAU,QAAQ,QAAQ,GAAG;CACnC,QAAQ,YAAY,KAAK,UAAU,QAAQ,MAAM,GAAG,OAAO,EAAA,CAAG,YAAY;AAC5E;;;;;AAMA,SAAgB,qBAAqB,KAAa,OAAsC;CACtF,MAAM,IAAI,IAAI,QAAQ,GAAG;CACzB,IAAI,MAAM,IAAI,OAAO,CAAC;CACtB,MAAM,SAAS,IAAI,QAAQ,KAAK,CAAC;CACjC,MAAM,QAAQ,IAAI,MAAM,IAAI,GAAG,WAAW,KAAK,KAAA,IAAY,MAAM;CACjE,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,GAAG;EACnC,MAAM,KAAK,KAAK,QAAQ,GAAG;EAC3B,IAAI,OAAO,MAAM,CAAC,MAAM,IAAI,YAAY,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC,GAAG;EAC7D,MAAM,MAAM,KAAK,MAAM,KAAK,CAAC;EAC7B,KAAK,MAAM,SAAS,CAAC,KAAK,WAAW,GAAG,CAAC,GACvC,IAAI,MAAM,UAAU,oBAAoB,UAAU,UAAU,MAAM,IAAI,KAAK;CAE/E;CACA,OAAO,CAAC,GAAG,KAAK;AAClB;;AAGA,SAAgB,YAAY,MAAc,QAAmC;CAC3E,IAAI,OAAO,WAAW,KAAK,KAAK,WAAW,GAAG,OAAO;CACrD,IAAI,MAAM;CACV,KAAK,MAAM,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,GAChE,IAAI,MAAM,SAAS,KAAK,IAAI,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,KAAK,CAAC,CAAC,KAAK,QAAQ;CAEnF,OAAO;AACT;AAEA,SAAS,gBAAgB,IAAqB;CAC5C,OACE,OAAO,OACP,OAAO,QACP,OAAO,QACP,OAAO,OACP,OAAO,QACP,OAAO,OACP,OAAO;AAEX;;;;;AAMA,SAAgB,iBAAiB,MAAc,OAAoC;CACjF,IAAI,IAAI,KAAK,QAAQ,GAAG;CACxB,IAAI,MAAM,IAAI,OAAO;CACrB,IAAI,MAAM;CACV,IAAI,SAAS;CACb,OAAO,MAAM,IAAI;EACf,IAAI,MAAM,IAAI;EACd,OAAO,MAAM,KAAK,UAAU,CAAC,gBAAgB,KAAK,OAAO,GAAG,CAAC,GAAG;EAChE,OAAO,KAAK,MAAM,QAAQ,CAAC,IAAI,eAAe,KAAK,MAAM,GAAG,GAAG,GAAG,KAAK;EACvE,SAAS;EACT,IAAI,KAAK,QAAQ,KAAK,GAAG;CAC3B;CACA,OAAO,MAAM,KAAK,MAAM,MAAM;AAChC;;AAGA,SAAgB,aACd,MACA,OACA,QACQ;CACR,OAAO,YAAY,iBAAiB,MAAM,KAAK,GAAG,MAAM;AAC1D"}

package/dist/{sensitive-names-CNgHaqv9.js → sensitive-names-NiKIRhp5.js}

@@ -1,29 +1,3 @@
-// src/utils/own-property.ts
-/**
-* True for the one key that must never be assigned with `target[key] = value`.
-*
-* Assigning `constructor` or `prototype` on a fresh plain object only creates an
-* own property, which is harmless. Only `__proto__` invokes the prototype setter.
-*/
-function isProtoKey(key) {
-	return key === "__proto__";
-}
-/**
-* Copy `value` onto `target[key]` as an own, enumerable data property.
-*
-* Normal keys use a plain assignment, which is the fast path. `__proto__` goes
-* through `Object.defineProperty` so that a key taken from logged or parsed data
-* becomes an own property instead of replacing the object's prototype.
-*/
-function assignOwn(target, key, value) {
-	if (key === "__proto__") Object.defineProperty(target, key, {
-		value,
-		enumerable: true,
-		writable: true,
-		configurable: true
-	});
-	else target[key] = value;
-}
 // src/utils/sensitive-names.ts
 /**
 * The one list of sensitive names. Log redaction (redact.utils), the HTTP logger
@@ -236,24 +210,12 @@ Object.defineProperty(exports, "TRANSPORT_CONFIG_SECRET_NAMES", {
 		return TRANSPORT_CONFIG_SECRET_NAMES;
 	}
 });
-Object.defineProperty(exports, "assignOwn", {
-	enumerable: true,
-	get: function() {
-		return assignOwn;
-	}
-});
 Object.defineProperty(exports, "buildNameSet", {
 	enumerable: true,
 	get: function() {
 		return buildNameSet;
 	}
 });
-Object.defineProperty(exports, "isProtoKey", {
-	enumerable: true,
-	get: function() {
-		return isProtoKey;
-	}
-});
 Object.defineProperty(exports, "redactUrlQuery", {
 	enumerable: true,
 	get: function() {
@@ -279,4 +241,4 @@ Object.defineProperty(exports, "sensitiveQueryValues", {
 	}
 });
 
-//# sourceMappingURL=sensitive-names-CNgHaqv9.js.map
+//# sourceMappingURL=sensitive-names-NiKIRhp5.js.map

package/dist/sensitive-names-NiKIRhp5.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-names-NiKIRhp5.js","names":[],"sources":["../src/utils/sensitive-names.ts"],"sourcesContent":["/**\n * The one list of sensitive names. Log redaction (redact.utils), the HTTP logger\n * middleware and transport secret handling (transports/secret-config) all read it,\n * so the lists cannot drift. No imports: safe from any module, including browser code.\n */\n\n/** Field names redacted by name, wherever they appear in logged data. */\nexport const SENSITIVE_KEY_NAMES: readonly string[] = [\n  'password',\n  'passwd',\n  'secret',\n  'token',\n  'apiKey',\n  'api_key',\n  'accessToken',\n  'access_token',\n  'refreshToken',\n  'refresh_token',\n  'authorization',\n  'credentials',\n  'privateKey',\n  'private_key',\n  'clientSecret',\n  'client_secret',\n  'cookie',\n  'set-cookie',\n  'x-api-key',\n  'session',\n  'proxy-authorization',\n  'x-auth-token',\n  'x-access-token',\n  'aws_secret_access_key',\n  'awsSecretAccessKey',\n  'secretAccessKey',\n];\n\n/**\n * Extra names that only mean \"secret\" inside transport configuration, where\n * short words like `key` or `signature` are credentials, not log fields.\n */\nexport const TRANSPORT_CONFIG_SECRET_NAMES: readonly string[] = [\n  'writeKey',\n  'apiSecret',\n  'connectionString',\n  'sessionToken',\n  'passphrase',\n  'signature',\n  'pwd',\n  'pfx',\n  'cert',\n  'key',\n  'auth',\n];\n\n/** Request headers whose values are never logged. */\nexport const DEFAULT_REDACT_HEADERS: readonly string[] = [\n  'authorization',\n  'cookie',\n  'set-cookie',\n  'x-api-key',\n  'proxy-authorization',\n  'x-auth-token',\n  'x-access-token',\n  'x-csrf-token',\n  'x-amz-security-token',\n];\n\n/** Query-string parameters whose values are never logged. */\nexport const DEFAULT_REDACT_QUERY_PARAMS: readonly string[] = [\n  'token',\n  'access_token',\n  'refresh_token',\n  'code',\n  'password',\n  'secret',\n  'api_key',\n  'apikey',\n  'key',\n  'signature',\n  'sig',\n  'auth',\n  'accesstoken',\n  'refreshtoken',\n  'id_token',\n  'idtoken',\n  'client_secret',\n  'clientsecret',\n  'session',\n  'sessionid',\n  'session_id',\n  'jwt',\n  'auth_token',\n  'authtoken',\n  'api-key',\n  'x-api-key',\n  'x-amz-signature',\n  'x-amz-credential',\n  'x-amz-security-token',\n  'x-goog-signature',\n  'x-goog-credential',\n  'access-token',\n  'x-access-token',\n  'x-auth-token',\n  'apitoken',\n  'api_token',\n];\n\nfunction safeDecode(value: string): string {\n  try {\n    return decodeURIComponent(value.replace(/\\+/g, ' '));\n  } catch {\n    return value;\n  }\n}\n\n/** Replace the values of sensitive query parameters, leaving the rest verbatim. */\nexport function redactUrlQuery(url: string, redactParams: ReadonlySet<string>): string {\n  const q = url.indexOf('?');\n  if (q === -1) return url;\n  const hashAt = url.indexOf('#', q);\n  const query = url.slice(q + 1, hashAt === -1 ? undefined : hashAt);\n  const hash = hashAt === -1 ? '' : url.slice(hashAt);\n  const cleaned = query\n    .split('&')\n    .map((pair) => {\n      const eq = pair.indexOf('=');\n      const rawKey = eq === -1 ? pair : pair.slice(0, eq);\n      const decoded = safeDecode(rawKey);\n      const bracket = decoded.indexOf('[');\n      const name = (bracket === -1 ? decoded : decoded.slice(0, bracket)).toLowerCase();\n      return redactParams.has(name) && eq !== -1 ? `${rawKey}=[REDACTED]` : pair;\n    })\n    .join('&');\n  return `${url.slice(0, q)}?${cleaned}${hash}`;\n}\n\n/** Lower-cased lookup set of the default names plus any extras. */\nexport function buildNameSet(\n  defaults: readonly string[],\n  extra: readonly string[] | undefined\n): Set<string> {\n  return new Set([...defaults, ...(extra ?? [])].map((n) => n.toLowerCase()));\n}\n\nconst REDACTED = '[REDACTED]';\nconst MIN_SCRUB_LENGTH = 3;\n\nfunction queryNameOf(rawKey: string): string {\n  const decoded = safeDecode(rawKey);\n  const bracket = decoded.indexOf('[');\n  return (bracket === -1 ? decoded : decoded.slice(0, bracket)).toLowerCase();\n}\n\n/**\n * Raw and decoded values of sensitive query parameters present in this URL.\n * Values shorter than 3 characters or already `[REDACTED]` are ignored.\n */\nexport function sensitiveQueryValues(url: string, names: ReadonlySet<string>): string[] {\n  const q = url.indexOf('?');\n  if (q === -1) return [];\n  const hashAt = url.indexOf('#', q);\n  const query = url.slice(q + 1, hashAt === -1 ? undefined : hashAt);\n  const found = new Set<string>();\n  for (const pair of query.split('&')) {\n    const eq = pair.indexOf('=');\n    if (eq === -1 || !names.has(queryNameOf(pair.slice(0, eq)))) continue;\n    const raw = pair.slice(eq + 1);\n    for (const value of [raw, safeDecode(raw)]) {\n      if (value.length >= MIN_SCRUB_LENGTH && value !== REDACTED) found.add(value);\n    }\n  }\n  return [...found];\n}\n\n/** Replace every literal occurrence of `values` in `text` with `[REDACTED]`. */\nexport function scrubValues(text: string, values: readonly string[]): string {\n  if (values.length === 0 || text.length === 0) return text;\n  let out = text;\n  for (const value of [...values].sort((a, b) => b.length - a.length)) {\n    if (value.length > 0 && out.includes(value)) out = out.split(value).join(REDACTED);\n  }\n  return out;\n}\n\nfunction isUrlTerminator(ch: string): boolean {\n  return (\n    ch === ' ' ||\n    ch === '\\n' ||\n    ch === '\\r' ||\n    ch === '\\t' ||\n    ch === '\"' ||\n    ch === \"'\" ||\n    ch === '`'\n  );\n}\n\n/**\n * Redact sensitive query values in every `?query` found inside free text (an\n * error message, a stack line). Scans for `?` and cuts at whitespace or a quote.\n */\nexport function redactUrlsInText(text: string, names: ReadonlySet<string>): string {\n  let q = text.indexOf('?');\n  if (q === -1) return text;\n  let out = '';\n  let cursor = 0;\n  while (q !== -1) {\n    let end = q + 1;\n    while (end < text.length && !isUrlTerminator(text.charAt(end))) end++;\n    out += text.slice(cursor, q) + redactUrlQuery(text.slice(q, end), names);\n    cursor = end;\n    q = text.indexOf('?', end);\n  }\n  return out + text.slice(cursor);\n}\n\n/** Shape-preserving URL redaction plus literal scrubbing of this request's secret values. */\nexport function sanitizeText(\n  text: string,\n  names: ReadonlySet<string>,\n  values: readonly string[]\n): string {\n  return scrubValues(redactUrlsInText(text, names), values);\n}\n"],"mappings":";;;;;;;AAOA,MAAa,sBAAyC;CACpD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;;AAMA,MAAa,gCAAmD;CAC9D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,8BAAiD;CAC5D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI;EACF,OAAO,mBAAmB,MAAM,QAAQ,OAAO,GAAG,CAAC;CACrD,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,eAAe,KAAa,cAA2C;CACrF,MAAM,IAAI,IAAI,QAAQ,GAAG;CACzB,IAAI,MAAM,IAAI,OAAO;CACrB,MAAM,SAAS,IAAI,QAAQ,KAAK,CAAC;CACjC,MAAM,QAAQ,IAAI,MAAM,IAAI,GAAG,WAAW,KAAK,KAAA,IAAY,MAAM;CACjE,MAAM,OAAO,WAAW,KAAK,KAAK,IAAI,MAAM,MAAM;CAClD,MAAM,UAAU,MACb,MAAM,GAAG,CAAC,CACV,KAAK,SAAS;EACb,MAAM,KAAK,KAAK,QAAQ,GAAG;EAC3B,MAAM,SAAS,OAAO,KAAK,OAAO,KAAK,MAAM,GAAG,EAAE;EAClD,MAAM,UAAU,WAAW,MAAM;EACjC,MAAM,UAAU,QAAQ,QAAQ,GAAG;EACnC,MAAM,QAAQ,YAAY,KAAK,UAAU,QAAQ,MAAM,GAAG,OAAO,EAAA,CAAG,YAAY;EAChF,OAAO,aAAa,IAAI,IAAI,KAAK,OAAO,KAAK,GAAG,OAAO,eAAe;CACxE,CAAC,CAAC,CACD,KAAK,GAAG;CACX,OAAO,GAAG,IAAI,MAAM,GAAG,CAAC,EAAE,GAAG,UAAU;AACzC;;AAGA,SAAgB,aACd,UACA,OACa;CACb,OAAO,IAAI,IAAI,CAAC,GAAG,UAAU,GAAI,SAAS,CAAC,CAAE,CAAC,CAAC,KAAK,MAAM,EAAE,YAAY,CAAC,CAAC;AAC5E;AAEA,MAAM,WAAW;AACjB,MAAM,mBAAmB;AAEzB,SAAS,YAAY,QAAwB;CAC3C,MAAM,UAAU,WAAW,MAAM;CACjC,MAAM,UAAU,QAAQ,QAAQ,GAAG;CACnC,QAAQ,YAAY,KAAK,UAAU,QAAQ,MAAM,GAAG,OAAO,EAAA,CAAG,YAAY;AAC5E;;;;;AAMA,SAAgB,qBAAqB,KAAa,OAAsC;CACtF,MAAM,IAAI,IAAI,QAAQ,GAAG;CACzB,IAAI,MAAM,IAAI,OAAO,CAAC;CACtB,MAAM,SAAS,IAAI,QAAQ,KAAK,CAAC;CACjC,MAAM,QAAQ,IAAI,MAAM,IAAI,GAAG,WAAW,KAAK,KAAA,IAAY,MAAM;CACjE,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,GAAG;EACnC,MAAM,KAAK,KAAK,QAAQ,GAAG;EAC3B,IAAI,OAAO,MAAM,CAAC,MAAM,IAAI,YAAY,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC,GAAG;EAC7D,MAAM,MAAM,KAAK,MAAM,KAAK,CAAC;EAC7B,KAAK,MAAM,SAAS,CAAC,KAAK,WAAW,GAAG,CAAC,GACvC,IAAI,MAAM,UAAU,oBAAoB,UAAU,UAAU,MAAM,IAAI,KAAK;CAE/E;CACA,OAAO,CAAC,GAAG,KAAK;AAClB;;AAGA,SAAgB,YAAY,MAAc,QAAmC;CAC3E,IAAI,OAAO,WAAW,KAAK,KAAK,WAAW,GAAG,OAAO;CACrD,IAAI,MAAM;CACV,KAAK,MAAM,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,GAChE,IAAI,MAAM,SAAS,KAAK,IAAI,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,KAAK,CAAC,CAAC,KAAK,QAAQ;CAEnF,OAAO;AACT;AAEA,SAAS,gBAAgB,IAAqB;CAC5C,OACE,OAAO,OACP,OAAO,QACP,OAAO,QACP,OAAO,OACP,OAAO,QACP,OAAO,OACP,OAAO;AAEX;;;;;AAMA,SAAgB,iBAAiB,MAAc,OAAoC;CACjF,IAAI,IAAI,KAAK,QAAQ,GAAG;CACxB,IAAI,MAAM,IAAI,OAAO;CACrB,IAAI,MAAM;CACV,IAAI,SAAS;CACb,OAAO,MAAM,IAAI;EACf,IAAI,MAAM,IAAI;EACd,OAAO,MAAM,KAAK,UAAU,CAAC,gBAAgB,KAAK,OAAO,GAAG,CAAC,GAAG;EAChE,OAAO,KAAK,MAAM,QAAQ,CAAC,IAAI,eAAe,KAAK,MAAM,GAAG,GAAG,GAAG,KAAK;EACvE,SAAS;EACT,IAAI,KAAK,QAAQ,KAAK,GAAG;CAC3B;CACA,OAAO,MAAM,KAAK,MAAM,MAAM;AAChC;;AAGA,SAAgB,aACd,MACA,OACA,QACQ;CACR,OAAO,YAAY,iBAAiB,MAAM,KAAK,GAAG,MAAM;AAC1D"}

package/dist/{slack.transport-C6E0l4kw.d.ts → slack.transport-5OPL7H3u.d.mts}

@@ -1,4 +1,4 @@
-import { _ as TransportLogEntry, l as IAsyncTransport } from "./transport.types-CzJq4IrF.js";
+import { _ as TransportLogEntry, l as IAsyncTransport } from "./transport.types-B1ejJJP6.mjs";
 interface OtlpLogTransportConfig {
   /** OTLP/HTTP logs endpoint, e.g. `http://localhost:4318/v1/logs`. */
   url: string;
@@ -18,6 +18,11 @@ interface OtlpLogTransportConfig {
   flushIntervalMs?: number;
   /** Abort a request that has not finished after this many ms. Default: 10000. */
   requestTimeoutMs?: number;
+  /**
+   * Request timeout (ms) while closing, so a hung collector cannot outlast the
+   * shutdown budget (5 s by default); also caps a request already in flight when close() starts, and close() tries twice. Default: 1500.
+   */
+  closeTimeoutMs?: number;
   /** Max buffered entries; the oldest are dropped past this. Default: 10000. */
   maxBufferSize?: number;
   level?: string;
@@ -39,6 +44,9 @@ declare class OtlpLogTransport implements IAsyncTransport {
   private readonly batchSize;
   private readonly flushIntervalMs;
   private readonly requestTimeoutMs;
+  private readonly closeTimeoutMs;
+  private closing;
+  private readonly inFlight;
   private readonly resourceAttrs;
   private readonly buffer;
   private flushTimer;
@@ -108,6 +116,71 @@ declare class DiscordTransport implements IAsyncTransport {
   private fitToBudget;
   private draftFor;
 }
+type SentrySeverity = 'fatal' | 'error' | 'warning' | 'log' | 'info' | 'debug';
+type SentryLogMethod = 'trace' | 'debug' | 'info' | 'warn' | 'error' | 'fatal';
+/** The part of a Sentry scope the transport uses. `withScope` hands one to its callback. */
+interface SentryScopeLike {
+  setLevel(level: SentrySeverity): unknown;
+  setTag(key: string, value: string): unknown;
+  setExtras(extras: Record<string, unknown>): unknown;
+  setContext(name: string, context: Record<string, unknown> | null): unknown;
+}
+/** The part of the Sentry Logs API (`Sentry.logger`, SDK 9.41+) the transport uses. */
+type SentryLoggerLike = Partial<Record<SentryLogMethod, (message: string, attributes?: Record<string, unknown>) => unknown>>;
+/**
+ * The part of the Sentry JS namespace the transport calls (`import * as Sentry from
+ * '@sentry/node'` satisfies it). Only the two capture functions are required.
+ */
+interface SentryLike {
+  captureException(exception: unknown, hint?: unknown): unknown;
+  captureMessage(message: string, hint?: unknown): unknown;
+  addBreadcrumb?(breadcrumb: Record<string, unknown>): unknown;
+  withScope?(callback: (scope: SentryScopeLike) => void): unknown;
+  logger?: SentryLoggerLike;
+  flush?(timeout?: number): PromiseLike<unknown>;
+}
+interface SentryTransportConfig {
+  /** Your initialised Sentry namespace, e.g. `import * as Sentry from '@sentry/node'`. */
+  sentry: SentryLike;
+  /**
+   * Lowest level sent as a Sentry event. Lower levels become breadcrumbs or logs.
+   * A logixia level name; compared by its Sentry severity. Default: 'error'.
+   */
+  minLevel?: string;
+  /**
+   * Send levels below `minLevel` to the Sentry Logs API (`sentry.logger`) instead of
+   * breadcrumbs. Needs SDK 9.41+ with `enableLogs: true` in `Sentry.init` (on by default
+   * from 10.71). Default: false. Without `sentry.logger` it falls back to breadcrumbs.
+   */
+  logs?: boolean;
+  /** Record levels below `minLevel` as breadcrumbs (when not sent as logs). Default: true. */
+  breadcrumbs?: boolean;
+  /** Extra or overriding level -> Sentry severity mappings, e.g. for custom levels. */
+  levelMap?: Record<string, SentrySeverity>;
+  /** Max ms `flush()` and `close()` wait for `sentry.flush`. Default: 2000. */
+  flushTimeoutMs?: number;
+  filter?: (entry: TransportLogEntry) => boolean;
+}
+declare class SentryTransport implements IAsyncTransport {
+  readonly name = "sentry";
+  filter?: (entry: TransportLogEntry) => boolean;
+  private readonly sentry;
+  private readonly minRank;
+  private readonly useLogs;
+  private readonly useBreadcrumbs;
+  private readonly levelMap;
+  private readonly flushTimeoutMs;
+  private warnedNoLogger;
+  constructor(config: SentryTransportConfig);
+  write(entry: TransportLogEntry): void;
+  flush(): Promise<void>;
+  /** Flushes pending events; the Sentry client itself stays open for the application. */
+  close(): Promise<void>;
+  private severityOf;
+  private captureEvent;
+  private sendLog;
+  private addBreadcrumb;
+}
 /** A Slack message body as returned by a custom `formatter`. */
 interface SlackMessage {
   text?: string;
@@ -155,5 +228,5 @@ declare class SlackTransport implements IAsyncTransport {
   private buildPayload;
   private messageFor;
 }
-export { DiscordTransport as a, OtlpLogTransportConfig as c, DiscordEmbed as i, toOtelSeverity as l, SlackTransport as n, DiscordTransportConfig as o, SlackTransportConfig as r, OtlpLogTransport as s, SlackMessage as t };
-//# sourceMappingURL=slack.transport-C6E0l4kw.d.ts.map
+export { SentryLoggerLike as a, SentryTransport as c, DiscordTransport as d, DiscordTransportConfig as f, toOtelSeverity as h, SentryLike as i, SentryTransportConfig as l, OtlpLogTransportConfig as m, SlackTransport as n, SentryScopeLike as o, OtlpLogTransport as p, SlackTransportConfig as r, SentrySeverity as s, SlackMessage as t, DiscordEmbed as u };
+//# sourceMappingURL=slack.transport-5OPL7H3u.d.mts.map

package/dist/slack.transport-5OPL7H3u.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.transport-5OPL7H3u.d.mts","names":[],"sources":["../src/transports/otlp.transport.ts","../src/transports/discord.transport.ts","../src/transports/sentry.transport.ts","../src/transports/slack.transport.ts"],"mappings":";UAuCiB;;EAEf;;EAEA,UAAU;;EAEV;;EAEA;;EAEA;;EAEA,qBAAqB;;EAErB;;EAEA;;EAEA;;;;;EAKA;;EAEA;EACA;;;;;;;iBA4Bc,eAAe;EAAkB;EAAgB;;cA4GpD,4BAA4B;WACvB;WACA;mBAEC;mBACA;mBACA;mBACA;mBACA;mBACA;UACT;mBACS;mBACA;mBAEA;UACT;EAEI,YAAA,QAAQ;EAgCpB,MAAM,OAAO;;UAML;UA+BA;EAgBR,SAAS;UAID;UAIM;EAiCR,SAAS;;UC1SA;EACf;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;EACA,SAAS;GACR;;UAGc;;EAEf;;EAEA;EACA;;EAEA;;EAEA;;;;;EAKA,aAAa,OAAO,sBAAsB;EAC1C,UAAU,OAAO;;EAEjB;;EAEA;;EAEA;EACA;;cA0FW,4BAA4B;WACvB;WACA;EACT,UAAU,OAAO;mBAEP;mBACA;mBACA;mBACA;EAEL,YAAA,QAAQ;EAiCpB,MAAM,OAAO;EAMb,SAAS;EAIT,SAAS;;EAKT,UAAU;UASF;;UAoBA;UAgBA;;KC9PE;KACP;;UAGY;EACf,SAAS,OAAO;EAChB,OAAO,aAAa;EACpB,UAAU,QAAQ;EAClB,WAAW,cAAc,SAAS;;;KAIxB,mBAAmB,QAC7B,OAAO,kBAAkB,iBAAiB,aAAa;;;;;UAOxC;EACf,iBAAiB,oBAAoB;EACrC,eAAe,iBAAiB;EAChC,eAAe,YAAY;EAC3B,WAAW,WAAW,OAAO;EAC7B,SAAS;EACT,OAAO,mBAAmB;;UAGX;;EAEf,QAAQ;;;;;EAKR;;;;;;EAMA;;EAEA;;EAEA,WAAW,eAAe;;EAE1B;EACA,UAAU,OAAO;;cAiDN,2BAA2B;WACtB;EACT,UAAU,OAAO;mBAEP;mBACA;mBACA;mBACA;mBACA;mBACA;UACT;EAEI,YAAA,QAAQ;EAyBpB,MAAM,OAAO;EAeP,SAAS;;EAkBf,SAAS;UAID;UAIA;UAiCA;UAuBA;;;UCxNO;EACf;EACA;GACC;;UAGc;;EAEf;;EAEA;EACA;EACA;;EAEA;;;;;;EAMA,aAAa,OAAO,sBAAsB;EAC1C,UAAU,OAAO;;EAEjB;;EAEA;;EAEA;EACA;;cAgBW,0BAA0B;WACrB;WACA;EACT,UAAU,OAAO;mBAEP;mBACA;mBACA;mBACA;EAEL,YAAA,QAAQ;EA4BpB,MAAM,OAAO;EAMb,SAAS;EAIT,SAAS;;EAKT,UAAU;UASF;UAiBA"}

package/dist/{slack.transport-BDyENuR0.d.mts → slack.transport-BFpBD_Ri.d.ts}

@@ -1,4 +1,4 @@
-import { _ as TransportLogEntry, l as IAsyncTransport } from "./transport.types-CzJq4IrF.mjs";
+import { _ as TransportLogEntry, l as IAsyncTransport } from "./transport.types-B1ejJJP6.js";
 interface OtlpLogTransportConfig {
   /** OTLP/HTTP logs endpoint, e.g. `http://localhost:4318/v1/logs`. */
   url: string;
@@ -18,6 +18,11 @@ interface OtlpLogTransportConfig {
   flushIntervalMs?: number;
   /** Abort a request that has not finished after this many ms. Default: 10000. */
   requestTimeoutMs?: number;
+  /**
+   * Request timeout (ms) while closing, so a hung collector cannot outlast the
+   * shutdown budget (5 s by default); also caps a request already in flight when close() starts, and close() tries twice. Default: 1500.
+   */
+  closeTimeoutMs?: number;
   /** Max buffered entries; the oldest are dropped past this. Default: 10000. */
   maxBufferSize?: number;
   level?: string;
@@ -39,6 +44,9 @@ declare class OtlpLogTransport implements IAsyncTransport {
   private readonly batchSize;
   private readonly flushIntervalMs;
   private readonly requestTimeoutMs;
+  private readonly closeTimeoutMs;
+  private closing;
+  private readonly inFlight;
   private readonly resourceAttrs;
   private readonly buffer;
   private flushTimer;
@@ -108,6 +116,71 @@ declare class DiscordTransport implements IAsyncTransport {
   private fitToBudget;
   private draftFor;
 }
+type SentrySeverity = 'fatal' | 'error' | 'warning' | 'log' | 'info' | 'debug';
+type SentryLogMethod = 'trace' | 'debug' | 'info' | 'warn' | 'error' | 'fatal';
+/** The part of a Sentry scope the transport uses. `withScope` hands one to its callback. */
+interface SentryScopeLike {
+  setLevel(level: SentrySeverity): unknown;
+  setTag(key: string, value: string): unknown;
+  setExtras(extras: Record<string, unknown>): unknown;
+  setContext(name: string, context: Record<string, unknown> | null): unknown;
+}
+/** The part of the Sentry Logs API (`Sentry.logger`, SDK 9.41+) the transport uses. */
+type SentryLoggerLike = Partial<Record<SentryLogMethod, (message: string, attributes?: Record<string, unknown>) => unknown>>;
+/**
+ * The part of the Sentry JS namespace the transport calls (`import * as Sentry from
+ * '@sentry/node'` satisfies it). Only the two capture functions are required.
+ */
+interface SentryLike {
+  captureException(exception: unknown, hint?: unknown): unknown;
+  captureMessage(message: string, hint?: unknown): unknown;
+  addBreadcrumb?(breadcrumb: Record<string, unknown>): unknown;
+  withScope?(callback: (scope: SentryScopeLike) => void): unknown;
+  logger?: SentryLoggerLike;
+  flush?(timeout?: number): PromiseLike<unknown>;
+}
+interface SentryTransportConfig {
+  /** Your initialised Sentry namespace, e.g. `import * as Sentry from '@sentry/node'`. */
+  sentry: SentryLike;
+  /**
+   * Lowest level sent as a Sentry event. Lower levels become breadcrumbs or logs.
+   * A logixia level name; compared by its Sentry severity. Default: 'error'.
+   */
+  minLevel?: string;
+  /**
+   * Send levels below `minLevel` to the Sentry Logs API (`sentry.logger`) instead of
+   * breadcrumbs. Needs SDK 9.41+ with `enableLogs: true` in `Sentry.init` (on by default
+   * from 10.71). Default: false. Without `sentry.logger` it falls back to breadcrumbs.
+   */
+  logs?: boolean;
+  /** Record levels below `minLevel` as breadcrumbs (when not sent as logs). Default: true. */
+  breadcrumbs?: boolean;
+  /** Extra or overriding level -> Sentry severity mappings, e.g. for custom levels. */
+  levelMap?: Record<string, SentrySeverity>;
+  /** Max ms `flush()` and `close()` wait for `sentry.flush`. Default: 2000. */
+  flushTimeoutMs?: number;
+  filter?: (entry: TransportLogEntry) => boolean;
+}
+declare class SentryTransport implements IAsyncTransport {
+  readonly name = "sentry";
+  filter?: (entry: TransportLogEntry) => boolean;
+  private readonly sentry;
+  private readonly minRank;
+  private readonly useLogs;
+  private readonly useBreadcrumbs;
+  private readonly levelMap;
+  private readonly flushTimeoutMs;
+  private warnedNoLogger;
+  constructor(config: SentryTransportConfig);
+  write(entry: TransportLogEntry): void;
+  flush(): Promise<void>;
+  /** Flushes pending events; the Sentry client itself stays open for the application. */
+  close(): Promise<void>;
+  private severityOf;
+  private captureEvent;
+  private sendLog;
+  private addBreadcrumb;
+}
 /** A Slack message body as returned by a custom `formatter`. */
 interface SlackMessage {
   text?: string;
@@ -155,5 +228,5 @@ declare class SlackTransport implements IAsyncTransport {
   private buildPayload;
   private messageFor;
 }
-export { DiscordTransport as a, OtlpLogTransportConfig as c, DiscordEmbed as i, toOtelSeverity as l, SlackTransport as n, DiscordTransportConfig as o, SlackTransportConfig as r, OtlpLogTransport as s, SlackMessage as t };
-//# sourceMappingURL=slack.transport-BDyENuR0.d.mts.map
+export { SentryLoggerLike as a, SentryTransport as c, DiscordTransport as d, DiscordTransportConfig as f, toOtelSeverity as h, SentryLike as i, SentryTransportConfig as l, OtlpLogTransportConfig as m, SlackTransport as n, SentryScopeLike as o, OtlpLogTransport as p, SlackTransportConfig as r, SentrySeverity as s, SlackMessage as t, DiscordEmbed as u };
+//# sourceMappingURL=slack.transport-BFpBD_Ri.d.ts.map

package/dist/slack.transport-BFpBD_Ri.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.transport-BFpBD_Ri.d.ts","names":[],"sources":["../src/transports/otlp.transport.ts","../src/transports/discord.transport.ts","../src/transports/sentry.transport.ts","../src/transports/slack.transport.ts"],"mappings":";UAuCiB;;EAEf;;EAEA,UAAU;;EAEV;;EAEA;;EAEA;;EAEA,qBAAqB;;EAErB;;EAEA;;EAEA;;;;;EAKA;;EAEA;EACA;;;;;;;iBA4Bc,eAAe;EAAkB;EAAgB;;cA4GpD,4BAA4B;WACvB;WACA;mBAEC;mBACA;mBACA;mBACA;mBACA;mBACA;UACT;mBACS;mBACA;mBAEA;UACT;EAEI,YAAA,QAAQ;EAgCpB,MAAM,OAAO;;UAML;UA+BA;EAgBR,SAAS;UAID;UAIM;EAiCR,SAAS;;UC1SA;EACf;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;EACA,SAAS;GACR;;UAGc;;EAEf;;EAEA;EACA;;EAEA;;EAEA;;;;;EAKA,aAAa,OAAO,sBAAsB;EAC1C,UAAU,OAAO;;EAEjB;;EAEA;;EAEA;EACA;;cA0FW,4BAA4B;WACvB;WACA;EACT,UAAU,OAAO;mBAEP;mBACA;mBACA;mBACA;EAEL,YAAA,QAAQ;EAiCpB,MAAM,OAAO;EAMb,SAAS;EAIT,SAAS;;EAKT,UAAU;UASF;;UAoBA;UAgBA;;KC9PE;KACP;;UAGY;EACf,SAAS,OAAO;EAChB,OAAO,aAAa;EACpB,UAAU,QAAQ;EAClB,WAAW,cAAc,SAAS;;;KAIxB,mBAAmB,QAC7B,OAAO,kBAAkB,iBAAiB,aAAa;;;;;UAOxC;EACf,iBAAiB,oBAAoB;EACrC,eAAe,iBAAiB;EAChC,eAAe,YAAY;EAC3B,WAAW,WAAW,OAAO;EAC7B,SAAS;EACT,OAAO,mBAAmB;;UAGX;;EAEf,QAAQ;;;;;EAKR;;;;;;EAMA;;EAEA;;EAEA,WAAW,eAAe;;EAE1B;EACA,UAAU,OAAO;;cAiDN,2BAA2B;WACtB;EACT,UAAU,OAAO;mBAEP;mBACA;mBACA;mBACA;mBACA;mBACA;UACT;EAEI,YAAA,QAAQ;EAyBpB,MAAM,OAAO;EAeP,SAAS;;EAkBf,SAAS;UAID;UAIA;UAiCA;UAuBA;;;UCxNO;EACf;EACA;GACC;;UAGc;;EAEf;;EAEA;EACA;EACA;;EAEA;;;;;;EAMA,aAAa,OAAO,sBAAsB;EAC1C,UAAU,OAAO;;EAEjB;;EAEA;;EAEA;EACA;;cAgBW,0BAA0B;WACrB;WACA;EACT,UAAU,OAAO;mBAEP;mBACA;mBACA;mBACA;EAEL,YAAA,QAAQ;EA4BpB,MAAM,OAAO;EAMb,SAAS;EAIT,SAAS;;EAKT,UAAU;UASF;UAiBA"}

package/dist/{slack.transport-YvaLJxNv.mjs → slack.transport-C6dzPJHX.mjs}

@@ -1,9 +1,10 @@
-import { n as protectSecrets, r as scrubError, t as collectSecrets } from "./secret-config-D1F4MW69.mjs";
+import { n as protectSecrets, r as scrubError, t as collectSecrets } from "./secret-config-Cng7XPLx.mjs";
 import { r as internalWarn, t as internalError } from "./internal-log-Cy5nF1ZL.mjs";
-import { i as stringifyForLog } from "./safe-stringify-pZOnzGRJ.mjs";
-import { g as BufferCap, t as _getOtelBridgeFieldNames } from "./otel-DAVxpArV.mjs";
-import { i as HttpError, o as isPermanentHttpError, t as BatchBuffer } from "./batch-buffer-BJqzpfpT.mjs";
+import { i as stringifyForLog } from "./safe-stringify-B5p5ktFe.mjs";
+import { g as BufferCap, t as _getOtelBridgeFieldNames } from "./otel-C5jBV_l_.mjs";
+import { i as HttpError, o as isPermanentHttpError, t as BatchBuffer } from "./batch-buffer-BnmVCCwI.mjs";
 // src/transports/otlp.transport.ts
+const DEFAULT_CLOSE_TIMEOUT_MS = 1500;
 const HEX_32 = /^[0-9a-f]{32}$/;
 const HEX_16 = /^[0-9a-f]{16}$/;
 /** OTLP JSON wants a 16-char lowercase hex span id; anything else (or all zeros) returns undefined. */
@@ -135,6 +136,9 @@ var OtlpLogTransport = class {
 	batchSize;
 	flushIntervalMs;
 	requestTimeoutMs;
+	closeTimeoutMs;
+	closing = false;
+	inFlight = /* @__PURE__ */ new Set();
 	resourceAttrs;
 	buffer;
 	flushTimer = null;
@@ -144,6 +148,7 @@ var OtlpLogTransport = class {
 		this.batchSize = config.batchSize ?? 100;
 		this.flushIntervalMs = config.flushIntervalMs ?? 5e3;
 		this.requestTimeoutMs = config.requestTimeoutMs ?? 1e4;
+		this.closeTimeoutMs = config.closeTimeoutMs ?? DEFAULT_CLOSE_TIMEOUT_MS;
 		this.level = config.level;
 		this.buffer = new BatchBuffer({
 			name: "OtlpLogTransport",
@@ -218,7 +223,9 @@ var OtlpLogTransport = class {
 			return;
 		}
 		const controller = new AbortController();
-		const timer = setTimeout(() => controller.abort(), this.requestTimeoutMs);
+		this.inFlight.add(controller);
+		const timeoutMs = this.closing ? Math.min(this.requestTimeoutMs, this.closeTimeoutMs) : this.requestTimeoutMs;
+		const timer = setTimeout(() => controller.abort(), timeoutMs);
 		try {
 			const res = await fetch(this.url, {
 				method: "POST",
@@ -232,10 +239,11 @@ var OtlpLogTransport = class {
 			if (!res.ok) throw new HttpError(res.status, "", "OTLP export");
 		} catch (err) {
 			scrubError(err, this.secretValues());
-			if (controller.signal.aborted) throw new Error(`OTLP export timed out after ${this.requestTimeoutMs}ms`, { cause: err });
+			if (controller.signal.aborted) throw new Error(`OTLP export timed out after ${timeoutMs}ms`, { cause: err });
 			throw err;
 		} finally {
 			clearTimeout(timer);
+			this.inFlight.delete(controller);
 		}
 	}
 	async close() {
@@ -243,7 +251,12 @@ var OtlpLogTransport = class {
 			clearInterval(this.flushTimer);
 			this.flushTimer = null;
 		}
-		await this.buffer.close();
+		this.closing = true;
+		for (const controller of this.inFlight) {
+			var _setTimeout$unref, _setTimeout;
+			(_setTimeout$unref = (_setTimeout = setTimeout(() => controller.abort(), this.closeTimeoutMs)).unref) === null || _setTimeout$unref === void 0 || _setTimeout$unref.call(_setTimeout);
+		}
+		await this.buffer.close(2);
 	}
 };
 // src/transports/webhook-queue.ts
@@ -756,6 +769,210 @@ async function readRetryAfter(res) {
 	} catch {}
 	return retryAfterHeaderMs(res);
 }
+// src/transports/sentry.transport.ts
+const DEFAULT_FLUSH_TIMEOUT_MS = 2e3;
+const MAX_CAUSE_DEPTH = 5;
+const MAX_TAG_LENGTH = 200;
+const SEVERITY_RANK = {
+	debug: 0,
+	log: 1,
+	info: 2,
+	warning: 3,
+	error: 4,
+	fatal: 5
+};
+const BUILTIN_SEVERITY = {
+	fatal: "fatal",
+	error: "error",
+	warn: "warning",
+	warning: "warning",
+	info: "info",
+	log: "log",
+	debug: "debug",
+	verbose: "debug",
+	trace: "debug"
+};
+const LOG_METHOD_BY_LEVEL = {
+	trace: "trace",
+	verbose: "trace",
+	debug: "debug",
+	info: "info",
+	log: "info",
+	warn: "warn",
+	warning: "warn",
+	error: "error",
+	fatal: "fatal"
+};
+const LOG_METHOD_BY_SEVERITY = {
+	debug: "debug",
+	log: "info",
+	info: "info",
+	warning: "warn",
+	error: "error",
+	fatal: "fatal"
+};
+var SentryTransport = class {
+	name = "sentry";
+	filter;
+	sentry;
+	minRank;
+	useLogs;
+	useBreadcrumbs;
+	levelMap;
+	flushTimeoutMs;
+	warnedNoLogger = false;
+	constructor(config) {
+		const sentry = config === null || config === void 0 ? void 0 : config.sentry;
+		if (!sentry || typeof sentry.captureException !== "function" || typeof sentry.captureMessage !== "function") throw new TypeError("SentryTransport: `sentry` must provide captureException and captureMessage (pass `import * as Sentry from \"@sentry/node\"`)");
+		this.sentry = sentry;
+		this.levelMap = normalizeLevelMap(config.levelMap);
+		const minLevel = (config.minLevel ?? "error").toLowerCase();
+		const minSeverity = this.levelMap[minLevel];
+		if (!minSeverity) throw new TypeError(`SentryTransport: unknown minLevel "${minLevel.slice(0, 40)}"`);
+		this.minRank = SEVERITY_RANK[minSeverity];
+		this.useLogs = config.logs === true;
+		this.useBreadcrumbs = config.breadcrumbs !== false;
+		this.flushTimeoutMs = Math.max(0, config.flushTimeoutMs ?? DEFAULT_FLUSH_TIMEOUT_MS);
+		if (config.filter) this.filter = config.filter;
+	}
+	write(entry) {
+		try {
+			const severity = this.severityOf(entry.level);
+			if (SEVERITY_RANK[severity] >= this.minRank) this.captureEvent(entry, severity);
+			else if (this.useLogs && this.sendLog(entry, severity)) {} else if (this.useBreadcrumbs) this.addBreadcrumb(entry, severity);
+		} catch (error) {
+			internalError("SentryTransport: failed to send entry", error);
+		}
+	}
+	async flush() {
+		const { flush } = this.sentry;
+		if (typeof flush !== "function") return;
+		let timer;
+		try {
+			const timeout = new Promise((resolve) => {
+				var _timer$unref;
+				timer = setTimeout(resolve, this.flushTimeoutMs + 50);
+				(_timer$unref = timer.unref) === null || _timer$unref === void 0 || _timer$unref.call(timer);
+			});
+			await Promise.race([Promise.resolve(flush.call(this.sentry, this.flushTimeoutMs)), timeout]);
+		} catch (error) {
+			internalError("SentryTransport: flush failed", error);
+		} finally {
+			if (timer) clearTimeout(timer);
+		}
+	}
+	/** Flushes pending events; the Sentry client itself stays open for the application. */
+	close() {
+		return this.flush();
+	}
+	severityOf(level) {
+		return this.levelMap[level.toLowerCase()] ?? "info";
+	}
+	captureEvent(entry, severity) {
+		const { error, rest } = splitError(entry.data);
+		const tags = { logixia_level: truncate(entry.level) };
+		if (entry.traceId) tags["trace_id"] = truncate(entry.traceId);
+		if (entry.context) tags["context"] = truncate(entry.context);
+		const extra = { ...rest };
+		if (error && error.message !== entry.message) extra["logMessage"] = entry.message;
+		const logixia = { level: entry.level };
+		if (entry.traceId) logixia["traceId"] = entry.traceId;
+		if (entry.context) logixia["context"] = entry.context;
+		if (entry.appName) logixia["appName"] = entry.appName;
+		if (entry.environment) logixia["environment"] = entry.environment;
+		const capture = (hint) => {
+			if (error) this.sentry.captureException(error, hint);
+			else this.sentry.captureMessage(entry.message, hint ?? severity);
+		};
+		if (typeof this.sentry.withScope === "function") this.sentry.withScope((scope) => {
+			scope.setLevel(severity);
+			for (const [key, value] of Object.entries(tags)) scope.setTag(key, value);
+			scope.setExtras(extra);
+			scope.setContext("logixia", logixia);
+			capture();
+		});
+		else capture({
+			level: severity,
+			tags,
+			extra,
+			contexts: { logixia }
+		});
+	}
+	sendLog(entry, severity) {
+		const logger = this.sentry.logger;
+		const method = logger ? LOG_METHOD_BY_LEVEL[entry.level.toLowerCase()] ?? LOG_METHOD_BY_SEVERITY[severity] : void 0;
+		const fn = method ? logger === null || logger === void 0 ? void 0 : logger[method] : void 0;
+		if (!fn) {
+			if (!this.warnedNoLogger) {
+				this.warnedNoLogger = true;
+				internalWarn("SentryTransport: logs: true but sentry.logger is unavailable (needs SDK 9.41+); using breadcrumbs");
+			}
+			return false;
+		}
+		const attributes = {};
+		for (const [key, value] of Object.entries(entry.data ?? {})) attributes[key] = attr(value);
+		if (entry.traceId) attributes["trace_id"] = entry.traceId;
+		if (entry.context) attributes["context"] = entry.context;
+		fn.call(logger, entry.message, attributes);
+		return true;
+	}
+	addBreadcrumb(entry, severity) {
+		if (typeof this.sentry.addBreadcrumb !== "function") return;
+		const data = { ...entry.data };
+		if (entry.traceId) data["traceId"] = entry.traceId;
+		this.sentry.addBreadcrumb({
+			category: entry.context ?? "logixia",
+			message: entry.message,
+			level: severity,
+			timestamp: entry.timestamp.getTime() / 1e3,
+			...Object.keys(data).length > 0 ? { data } : {}
+		});
+	}
+};
+function normalizeLevelMap(custom) {
+	const map = { ...BUILTIN_SEVERITY };
+	for (const [level, severity] of Object.entries(custom ?? {})) if (severity in SEVERITY_RANK) map[level.toLowerCase()] = severity;
+	return map;
+}
+function truncate(value) {
+	return value.length > MAX_TAG_LENGTH ? value.slice(0, MAX_TAG_LENGTH) : value;
+}
+/** Sentry log attributes are primitives; anything else is sent as JSON text. */
+function attr(value) {
+	if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") return value;
+	return stringifyForLog(value);
+}
+function splitError(data) {
+	if (!data) return {
+		error: void 0,
+		rest: {}
+	};
+	const { error: raw, ...rest } = data;
+	const error = toError(raw, 0);
+	return error ? {
+		error,
+		rest
+	} : {
+		error: void 0,
+		rest: data
+	};
+}
+/** Rebuilds an Error from `serializeError` output (or passes a real Error through). */
+function toError(value, depth) {
+	if (value instanceof Error) return value;
+	if (!value || typeof value !== "object") return void 0;
+	const { name, message, stack, cause } = value;
+	if (typeof message !== "string") return void 0;
+	const error = new Error(message);
+	const errorName = typeof name === "string" && name ? name : "Error";
+	error.name = errorName;
+	error.stack = typeof stack === "string" && stack ? stack : `${errorName}: ${message}`;
+	if (cause !== void 0 && depth < MAX_CAUSE_DEPTH) {
+		const nested = toError(cause, depth + 1);
+		if (nested) error.cause = nested;
+	}
+	return error;
+}
 const SLACK_DATA_MAX = 2500;
 const SLACK_FIELD_MAX = 300;
 const SLACK_TEXT_MAX = 1e3;
@@ -898,6 +1115,6 @@ function defaultMessage(entry) {
 		blocks
 	};
 }
-export { toOtelSeverity as i, DiscordTransport as n, OtlpLogTransport as r, SlackTransport as t };
+export { toOtelSeverity as a, OtlpLogTransport as i, SentryTransport as n, DiscordTransport as r, SlackTransport as t };
 
-//# sourceMappingURL=slack.transport-YvaLJxNv.mjs.map
+//# sourceMappingURL=slack.transport-C6dzPJHX.mjs.map