import "server-only";
import pino from "pino";

/**
 * Logger estructurado (JSON). Niveles: info / warn / error.
 * Las rutas de "redact" impiden que contraseñas, tokens o cookies lleguen a los logs.
 */
export const logger = pino({
  level: process.env.LOG_LEVEL ?? "info",
  base: { app: "chesco-cars" },
  redact: {
    paths: [
      "password",
      "*.password",
      "passwordHash",
      "*.passwordHash",
      "token",
      "*.token",
      "tokenHash",
      "*.tokenHash",
      "cookie",
      "*.cookie",
      "headers.cookie",
      "headers.authorization",
      "authorization",
      "*.secret",
    ],
    censor: "[REDACTED]",
  },
});