@apifuse/provider-sdk 2.2.0-beta.43 → 2.2.0-beta.44

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # @apifuse/provider-sdk Changelog
 
+## 2.2.0-beta.44
+
+- Release candidate for main commit a3091c0b4931c5ae48fe01b9776e4dc213db2716.
+
 ## 2.2.0-beta.43
 
 - Release candidate for main commit 5b8b6048514fb500ead400495bd5e1ed8695ed6d.

package/dist/server/serve-implementation.js

@@ -9,7 +9,7 @@ import { validateFailClosedDeclaration } from "../declaration-validation.js";
 import { safeProviderErrorObservability } from "../error-observability.js";
 import { SDK_OWNED_PROVIDER_ERROR_CODES, SDK_RUNTIME_OWNED_ERROR_CODES, SDK_STATUS_MAPPED_PROVIDER_ERROR_CODES, } from "../error-resolution.js";
 import { AuthError, isProviderError, isSessionExpiredError, isTransportError, isValidationError, ProviderError, } from "../errors.js";
-import { REDACTED_FIXTURE_VALUE, sanitizeDiagnosticText, } from "../fixture-sanitization.js";
+import { sanitizeDiagnosticText } from "../fixture-sanitization.js";
 import { loadProviderLocaleCatalogs, localizeAuthTurn, } from "../i18n/catalog.js";
 import { categoryForStatus, sourceForCategory, isRetryableCategory, PROVIDER_OBSERVABILITY_TAXONOMY_VERSION, } from "../observability.js";
 import { createScratchpad } from "../runtime/auth-flow.js";
@@ -979,47 +979,8 @@ function extractRequestId(raw) {
 }
 const MAX_PROVIDER_ERROR_CAUSE_FRAMES = 5;
 const MAX_PROVIDER_ERROR_CAUSE_MESSAGE_LENGTH = 300;
-const UNSTRUCTURED_PROVIDER_ERROR_CAUSE_MESSAGE = "[UNSTRUCTURED_UPSTREAM_TEXT]";
-const PROVIDER_ERROR_CAUSE_RETAINED_URL_RUN = /https?:\/\/[^\s"'<>]+/giu;
-const PROVIDER_ERROR_CAUSE_TOKEN_RUN = /\S+/gu;
-const PROVIDER_ERROR_CAUSE_TOKEN_EDGE_PUNCTUATION = /^[^\p{L}\p{N}]+|[^\p{L}\p{N}]+$/gu;
-const STRUCTURALLY_SAFE_PROVIDER_ERROR_CAUSE_WORDS = new Set([
-    "completion",
-    "diagnostic",
-    "provider",
-    "rejected",
-    "returned",
-    "upstream",
-]);
-/**
- * Cause frames fail closed when sanitization leaves a plausible credential-shaped free-text run.
- * Redaction sentinels and retained URLs are ignored. Every other whitespace token (or each side
- * of a structured key=value token) with at least eight Unicode characters must reduce to this
- * small vocabulary drawn from SDK diagnostics; counting punctuation keeps bare passwords opaque.
- */
-function isStructurallySafeProviderErrorCauseMessage(message) {
-    const classifiableMessage = message
-        .replaceAll(REDACTED_FIXTURE_VALUE, " ")
-        .replace(PROVIDER_ERROR_CAUSE_RETAINED_URL_RUN, " ");
-    for (const match of classifiableMessage.matchAll(PROVIDER_ERROR_CAUSE_TOKEN_RUN)) {
-        const token = match[0];
-        for (const run of token.split("=")) {
-            const diagnosticWord = run
-                .replace(PROVIDER_ERROR_CAUSE_TOKEN_EDGE_PUNCTUATION, "")
-                .toLowerCase();
-            if (STRUCTURALLY_SAFE_PROVIDER_ERROR_CAUSE_WORDS.has(diagnosticWord))
-                continue;
-            if ([...run].length >= 8)
-                return false;
-        }
-    }
-    return true;
-}
 function providerErrorCauseMessage(message) {
     const sanitized = sanitizeDiagnosticText(message);
-    if (!isStructurallySafeProviderErrorCauseMessage(sanitized)) {
-        return UNSTRUCTURED_PROVIDER_ERROR_CAUSE_MESSAGE;
-    }
     return sanitized.length > MAX_PROVIDER_ERROR_CAUSE_MESSAGE_LENGTH
         ? `${sanitized.slice(0, MAX_PROVIDER_ERROR_CAUSE_MESSAGE_LENGTH)}… [truncated]`
         : sanitized;

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "2.2.0-beta.43",
+	"version": "2.2.0-beta.44",
 	"name": "@apifuse/provider-sdk",
 	"private": false,
 	"type": "module",

package/src/server/serve-implementation.ts

@@ -23,10 +23,7 @@ import {
 	type ProviderErrorObservability,
 	type ProviderErrorOptions,
 } from "../errors.js";
-import {
-	REDACTED_FIXTURE_VALUE,
-	sanitizeDiagnosticText,
-} from "../fixture-sanitization.js";
+import { sanitizeDiagnosticText } from "../fixture-sanitization.js";
 import {
 	loadProviderLocaleCatalogs,
 	localizeAuthTurn,
@@ -1526,48 +1523,9 @@ export type ProviderErrorCauseFrame = {
 
 const MAX_PROVIDER_ERROR_CAUSE_FRAMES = 5;
 const MAX_PROVIDER_ERROR_CAUSE_MESSAGE_LENGTH = 300;
-const UNSTRUCTURED_PROVIDER_ERROR_CAUSE_MESSAGE = "[UNSTRUCTURED_UPSTREAM_TEXT]";
-const PROVIDER_ERROR_CAUSE_RETAINED_URL_RUN = /https?:\/\/[^\s"'<>]+/giu;
-const PROVIDER_ERROR_CAUSE_TOKEN_RUN = /\S+/gu;
-const PROVIDER_ERROR_CAUSE_TOKEN_EDGE_PUNCTUATION =
-	/^[^\p{L}\p{N}]+|[^\p{L}\p{N}]+$/gu;
-const STRUCTURALLY_SAFE_PROVIDER_ERROR_CAUSE_WORDS = new Set([
-	"completion",
-	"diagnostic",
-	"provider",
-	"rejected",
-	"returned",
-	"upstream",
-]);
-
-/**
- * Cause frames fail closed when sanitization leaves a plausible credential-shaped free-text run.
- * Redaction sentinels and retained URLs are ignored. Every other whitespace token (or each side
- * of a structured key=value token) with at least eight Unicode characters must reduce to this
- * small vocabulary drawn from SDK diagnostics; counting punctuation keeps bare passwords opaque.
- */
-function isStructurallySafeProviderErrorCauseMessage(message: string): boolean {
-	const classifiableMessage = message
-		.replaceAll(REDACTED_FIXTURE_VALUE, " ")
-		.replace(PROVIDER_ERROR_CAUSE_RETAINED_URL_RUN, " ");
-	for (const match of classifiableMessage.matchAll(PROVIDER_ERROR_CAUSE_TOKEN_RUN)) {
-		const token = match[0];
-		for (const run of token.split("=")) {
-			const diagnosticWord = run
-				.replace(PROVIDER_ERROR_CAUSE_TOKEN_EDGE_PUNCTUATION, "")
-				.toLowerCase();
-			if (STRUCTURALLY_SAFE_PROVIDER_ERROR_CAUSE_WORDS.has(diagnosticWord)) continue;
-			if ([...run].length >= 8) return false;
-		}
-	}
-	return true;
-}
 
 function providerErrorCauseMessage(message: string): string {
 	const sanitized = sanitizeDiagnosticText(message);
-	if (!isStructurallySafeProviderErrorCauseMessage(sanitized)) {
-		return UNSTRUCTURED_PROVIDER_ERROR_CAUSE_MESSAGE;
-	}
 	return sanitized.length > MAX_PROVIDER_ERROR_CAUSE_MESSAGE_LENGTH
 		? `${sanitized.slice(0, MAX_PROVIDER_ERROR_CAUSE_MESSAGE_LENGTH)}… [truncated]`
 		: sanitized;