var logger = SinkSharpBuilder
    .Create()
    .MinimumLevel(LogLevel.Information)
    .MinimumLevelFor("Microsoft", LogLevel.Warning)
    .WithCorrelationId()
    .WithEnvironment("MyApp", "Production")
    .WithPiiMasking()
    .WriteTo(new ColoredConsoleSink())
    .WriteTo(new RollingFileSink("logs/app.jsonl"))
    .BuildLogger("MyApp");

logger.LogInformation("Order {OrderId} placed by {Customer}", 42, "alice@example.com");
// alice@example.com → automatically PII-masked
// CorrelationId → captured from AsyncLocal, stamped on every event in the request

builder.Services.AddSinkSharp(options => options
    .MinimumLevel(LogLevel.Information)
    .MinimumLevelFor("Microsoft", LogLevel.Warning)
    .WithCorrelationId()
    .WithEnvironment("MyApp", builder.Environment.EnvironmentName)
    .WithPiiMasking()
    .WriteTo(new ColoredConsoleSink())
    .WriteTo(new RollingFileSink("logs/app.jsonl")));

// One-line correlation middleware — ASP.NET Core Web API / Minimal API only.
// Reads X-Correlation-Id header, generates if missing, sets CorrelationContext,
// writes response header. Replaces the manual app.Use() block.
// Worker Services and Console Apps: use CorrelationContext.Use(id) directly in your code.
app.UseSinkSharp();

DashboardSink dashSink = null!;

// 1. Register SinkSharp with dashboard sink
builder.Services.AddSinkSharp(options => options
    .WithDashboard(out dashSink)
    .WriteTo(new ColoredConsoleSink())
    .WriteTo(new RollingFileSink("logs/app.jsonl")));

// 2. Register dashboard DI (in-memory SignalR — single pod)
builder.Services.AddSinkSharpDashboard(dashSink);

var app = builder.Build();

// 3. Mount dashboard on your app — same host, same port
app.UseSinkSharpDashboard("/sinksharp/dashboard");
// → https://localhost:5001/sinksharp/dashboard

var builder = SinkSharpBuilder.Create()
    .WithDashboard(out var dashSink)
    .WriteTo(new ColoredConsoleSink());

var logger    = builder.BuildLogger("MyApp");
var dashboard = new DashboardServer(dashSink, port: 5341, queue: builder.GetQueue());
await dashboard.StartAsync();
// → http://localhost:5341

// Replace AddSinkSharpDashboard() with AddSinkSharpDashboardRedis()
// Safe to reuse your existing Redis — SinkSharp uses its own channel prefix
builder.Services.AddSinkSharpDashboardRedis(dashSink, signalR =>
    signalR.AddStackExchangeRedis(
        builder.Configuration["Redis:ConnectionString"],
        options => options.Configuration.ChannelPrefix =
            StackExchange.Redis.RedisChannel.Literal("MyApp.SinkSharp")));

app.UseSinkSharpDashboard("/sinksharp/dashboard"); // unchanged

// No auth — default (local dev, internal tools behind VPN)
app.UseSinkSharpDashboard("/sinksharp/dashboard");

// Bearer JWT — page always loads, token bar shown, user pastes JWT
// Hub and stats protected — ASP.NET validates JWT from browser
// Supports custom policies (PermissionAttribute, claims, roles)
app.UseSinkSharpDashboard("/sinksharp/dashboard", opts =>
    opts.RequireAuthorization("AdminOnly"));  // your policy in AddAuthorization()

// Role check — inline, no named policy needed
app.UseSinkSharpDashboard("/sinksharp/dashboard", opts =>
    opts.RequireRole("Admin", "DevOps"));

// Shared token — simple password, no auth middleware needed
app.UseSinkSharpDashboard("/sinksharp/dashboard", opts =>
    opts.UseToken(builder.Configuration["Dashboard:Token"]));

// IP allowlist — no user auth needed
app.UseSinkSharpDashboard("/sinksharp/dashboard", opts =>
    opts.AllowFrom("10.0.0.0/8", "192.168.0.0/16"));

// Basic auth — browser native prompt, no AddAuthentication() needed
app.UseSinkSharpDashboard("/sinksharp/dashboard", opts =>
    opts.UseBasicAuth("admin", "secret123"));

// Full control — any ASP.NET endpoint configuration
app.UseSinkSharpDashboard("/sinksharp/dashboard", opts =>
    opts.ConfigureEndpoints(ep => ep.RequireRateLimiting("fixed")));

builder.Services.AddSinkSharp(options => options

    // Minimum level for all loggers
    .MinimumLevel(LogLevel.Information)

    // Override level for a specific category (prefix match)
    .MinimumLevelFor("Microsoft.AspNetCore", LogLevel.Warning)
    .MinimumLevelFor("System", LogLevel.Error)

    // Built-in enrichers — work in all project types
    .WithCorrelationId()                          // AsyncLocal correlation ID
    .WithEnvironment("MyApp", "Production")       // AppName, Environment, MachineName
    .WithMachineName()                            // MachineName only (skip WithEnvironment)
    .WithPiiMasking()                             // email/phone/card masking
    .WithAzureContext()                           // region, resource group, pod

    // HTTP context enrichers — Web API / Minimal API only
    .WithRequestId(accessor)                      // RequestId from HttpContext.TraceIdentifier
    .WithUserContext(accessor)                    // UserId, UserName, UserRole (authenticated only)
    .WithRequestPath(accessor)                    // HttpMethod + RequestPath
    .WithElapsedTime(accessor)                    // ElapsedMs since request start

    // Structured filter — drops events before enqueue, zero allocation for dropped events
    .Filter(e => !e.MessageTemplate.Contains("health"))  // drop health check noise
    .Filter(e => e.Level >= LogLevel.Warning ||
                 e.Category.StartsWith("MyApp"))         // composite condition

    // Conditional enrichment — enricher only runs when predicate returns true
    // Example: only stamp the current UTC timestamp on Warning+ events (skip Debug/Info)
    .WithEnricher(new TimestampEnricher(), when: e => e.Level >= LogLevel.Warning)
    // TimestampEnricher is defined in SinkSharp.AdvancedEnricherSample — implement IEnricher
    // and add bag.AddOrUpdate("UtcTimestamp", DateTime.UtcNow.ToString("O"));

    // Sinks with per-sink minimum level
    .WriteTo(new ColoredConsoleSink(),                   LogLevel.Debug)
    .WriteTo(new RollingFileSink("logs/app.jsonl"),      LogLevel.Warning)
    .WithDashboard(out dashSink,                         LogLevel.Information)
);

// One-line middleware (Web API / Minimal API): X-Correlation-Id + ElapsedTime stopwatch
app.UseSinkSharp();

// HTTP context enrichers — add AddHttpContextAccessor() first, then register what you need
builder.Services.AddHttpContextAccessor();   // required — register this before any enricher below
builder.Services.AddSinkSharpRequestId();   // stamps RequestId
builder.Services.AddSinkSharpRequestPath(); // stamps HttpMethod + RequestPath
builder.Services.AddSinkSharpElapsedTime(); // stamps ElapsedMs since request start
builder.Services.AddSinkSharpUserContext(); // stamps UserId, UserName, UserRole

// Dynamic level at runtime — no restart needed
SinkSharpLoggerFactory.SetGlobalLevel(LogLevel.Debug);  // enable debug temporarily
SinkSharpLoggerFactory.SetGlobalLevel(LogLevel.None);   // restore startup level