log-foundry 0.5.1.dev9__tar.gz → 0.5.1.dev10__tar.gz

{log_foundry-0.5.1.dev9 → log_foundry-0.5.1.dev10}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: log-foundry
-Version: 0.5.1.dev9
+Version: 0.5.1.dev10
 Summary: Generate logs for your console and JSON events for downstream consumption.
 License-Expression: MIT
 License-File: LICENSE

{log_foundry-0.5.1.dev9 → log_foundry-0.5.1.dev10}/pyproject.toml

@@ -20,7 +20,7 @@ dependencies = [
 ]
 
 # Optional features. Install with: pip install log-foundry[aws]
-version = "0.5.1.dev9"
+version = "0.5.1.dev10"
 
 [project.optional-dependencies]
 aws = ["boto3>=1.34"]              # SQSSink, SNSSink, KinesisSink, FirehoseSink

{log_foundry-0.5.1.dev9 → log_foundry-0.5.1.dev10}/src/log_foundry/model.py

@@ -70,8 +70,13 @@ def build_event(
     → per-call ``fields`` (arch §5.1). Later sources win on a key conflict.
 
     The merged mapping is coerced and size-bounded here (SPEC-017 FR-001/FR-002), which is what
-    makes every sink's bare ``json.dumps`` safe without any of them changing. ``message`` is
-    bounded too: it is a base field, but unlike the other eleven it is caller-supplied free text.
+    makes every sink's bare ``json.dumps`` safe without any of them changing.
+
+    ``message`` and ``function`` are bounded too. They are base fields, but unlike the other ten
+    both are caller-supplied text: ``message`` directly, and ``function`` via ``@trace(name=...)``
+    or — on the orphan path, where ``api`` names the standalone span after the message itself —
+    from the same unbounded string. Leaving either out would keep ``info(huge_string)`` unbounded,
+    which is the hole this ceiling exists to close.
     """
     from log_foundry.config import get_config
     from log_foundry.ids import new_log_id
@@ -80,6 +85,7 @@ def build_event(
     merged: dict[str, object] = {**cfg.defaults, **span.defaults, **baggage, **fields}
     safe, clipped = sanitize_fields(merged, cfg=cfg)
     bounded_message, message_clipped = truncate_str(message, cfg.max_value_bytes)
+    bounded_function, function_clipped = truncate_str(span.name, cfg.max_value_bytes)
     event: dict[str, object] = {
         "timestamp": _iso_now(),
         "level": level,
@@ -88,13 +94,13 @@ def build_event(
         "span_id": span.span_id,
         "parent_span_id": span.parent_span_id,
         "log_id": new_log_id(),
-        "function": span.name,
+        "function": bounded_function,
         "service": cfg.service,
         "version": cfg.version,
         "env": cfg.env,
     }
     # Before ``fields`` so it reads ahead of the payload blob in a rendered log line.
-    if clipped or message_clipped:
+    if clipped or message_clipped or function_clipped:
         event[_TRUNCATED] = True
     event["fields"] = safe
     return event

{log_foundry-0.5.1.dev9 → log_foundry-0.5.1.dev10}/src/log_foundry/sanitize.py

@@ -254,8 +254,9 @@ class _Coercer:
 def coerce(value: object, *, cfg: Config) -> object:
     """Return a JSON-serializable, size-bounded equivalent of ``value``. Never raises.
 
-    Use :func:`sanitize_fields` for a whole event mapping — it reports whether a ceiling fired,
-    which this cannot.
+    ``value`` is treated as a field value, i.e. depth 0 — the same level it would occupy inside
+    an event's ``fields``. Use :func:`sanitize_fields` for a whole event mapping; it reports
+    whether a ceiling fired, which this cannot.
     """
     return _Coercer(cfg).value(value, 0)
 
@@ -271,7 +272,11 @@ def sanitize_fields(
     """
     coercer = _Coercer(cfg)
     try:
-        result = coercer.mapping(fields, 0)
+        # ``-1`` so the *values* of the top-level mapping sit at depth 0: ``fields`` is the event's
+        # payload container, not a level of nesting the caller chose. Otherwise ``max_depth=1``
+        # would replace every field value with ``<depth limit>`` and emit a uniformly empty event,
+        # which is exactly what FR-006's validation exists to prevent.
+        result = coercer.mapping(fields, -1)
     except Exception:  # noqa: BLE001 — belt and braces: `_Coercer.value` is already total, but
         return {}, True  # a hostile top-level mapping must not reach the caller either.
     if not isinstance(result, dict):

{log_foundry-0.5.1.dev9 → log_foundry-0.5.1.dev10}/src/log_foundry/sinks/multi.py

@@ -27,7 +27,11 @@ class MultiSink:
     """A :class:`~log_foundry.sinks.base.Sink` that forwards each batch to every child sink.
 
     Attributes:
-        failed: Count of child ``emit``/``close`` calls that raised and were isolated.
+        failed: Count of child ``emit``/``close`` **calls** that raised. Note this counts calls,
+            not batches: since total failure re-raises (SPEC-017 FR-004), the worker retries the
+            same batch, so one batch against an all-down fan-out of *n* children increments this
+            by *n* per attempt — ``n * (max_retries + 1)`` in total, with a stderr line each.
+            That is the visible cost of the loss no longer being silent.
     """
 
     def __init__(self, *sinks: Sink) -> None:

{log_foundry-0.5.1.dev9 → log_foundry-0.5.1.dev10}/src/log_foundry/worker.py

@@ -121,9 +121,15 @@ class Worker:
             # submitters. Lines may therefore interleave out of order under concurrency; the
             # counts they carry are still exact.
             if total == 1 or total % _DROP_WARN_EVERY == 0:
-                sys.stderr.write(
-                    f"log-foundry: log queue full, dropped {total} submission(s) so far\n"
-                )
+                try:
+                    sys.stderr.write(
+                        f"log-foundry: log queue full, dropped {total} submission(s) so far\n"
+                    )
+                except Exception:  # noqa: BLE001 — submit() runs on the *caller's* thread, so an
+                    # unwritable stderr (closed fd, broken pipe, daemonized process) would raise
+                    # straight into the app. A diagnostic about dropped logs must never itself be
+                    # the reason a decorated function fails. The counter is already recorded.
+                    pass
 
     def health(self) -> Health:
         """Snapshot the delivery counters (SPEC-017 FR-005). Never raises.