@apifuse/provider-sdk 2.2.0-beta.59 → 2.2.0-beta.60

package/AUTHORING.md

@@ -226,6 +226,22 @@ const utcInput = resolveHealthCheckInputDateTokens({ date: "+45d" }, new Date(),
 Do not re-resolve a health assertion's dates in UTC when its case input used the
 default KST calendar.
 
+### Sensitive vs public fields
+
+The platform fixture-privacy ratchet flags name-, phone-, and address-shaped keys
+unless the schema at that path declares them one way or the other. Declare every hit:
+
+- `sensitive(schema, kind)` / `fields.*()` — anything about a person: user, profile,
+  passenger, driver, or member names, emails, member ids, personal phone numbers.
+  Emits `x-apifuse-sensitive: true`; the value is redacted in published artifacts.
+- `publicField(schema)` — reviewed public data: business, shop, product, artist, or
+  facility names, hospital/hotel/station phones, timezone names. Emits
+  `x-apifuse-sensitive: false`; nothing is redacted. It is a review verdict, not a mute.
+  Credential-shaped keys (token, password, apiKey, …) cannot be declared public.
+
+Apply either helper to the leaf, before `.optional()`/`.nullable()`/`.default()`;
+`publicField()` over a wrapper that hides a `sensitive()` leaf throws at definition time.
+
 ### Real-handler E2E in standard tests
 
 `runStandardTests(provider)` validates declarations and fixtures but reports a

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # @apifuse/provider-sdk Changelog
 
+## 2.2.0-beta.60
+
+- Release candidate for main commit 5f417c6282b3a4d92bf31c8258ba913b5e53dc8b.
+
 ## 2.2.0-beta.59
 
 - Release candidate for main commit 55ae556fcf33e28a228c2d54ce76e7afa41e5dc7.

package/bin/apifuse-dev.ts

@@ -1,4 +1,5 @@
 #!/usr/bin/env bun
+import { readDiagnosticEnv } from "../src/runtime/diagnostic-env.js";
 
 import { existsSync } from "node:fs";
 import { dirname, relative, resolve } from "node:path";
@@ -87,7 +88,7 @@ export function createProviderContext(provider: ProviderDefinition): {
 		process.env,
 		provider.secrets?.map((secret) => secret.name) ?? [],
 	);
-	const providerEnv = { get: (key: string) => providerEnvironment[key] };
+	const providerEnv = { get: (key: string) => readDiagnosticEnv(key, providerEnvironment) };
 	const engineEnv = createEnvContext([PROVIDER_RUNTIME_CHOICE_TOKEN_MASTER_SECRET_ENV]);
 	const engineCredentials = readEngineProxyCredentials();
 	const credential = createCredentialContext();

package/bin/apifuse-perf.ts

@@ -1,5 +1,6 @@
 #!/usr/bin/env bun
 // @ts-nocheck
+import { readDiagnosticEnv } from "../src/runtime/diagnostic-env.js";
 
 import { existsSync } from "node:fs";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
@@ -25,11 +26,20 @@ import {
 	type StealthResponse,
 	wrapWithInstrumentation,
 } from "../src/index.js";
+import {
+	bindDiagnosticSensitiveRegistry,
+	type CompiledDiagnosticSensitiveValues,
+	compileProcessDiagnosticSensitiveValues,
+	createDiagnosticRedactor,
+	redactDiagnosticText,
+} from "../src/runtime/diagnostic-redactor.js";
 import { computeStats, groupSpansByName, type PerfStats } from "../src/runtime/perf.js";
 import { createMemoryProviderRuntimeState } from "../src/runtime/state.js";
 import { createStealthClient } from "../src/runtime/stealth.js";
 import { createTraceContext, resolveTraceContextOptions } from "../src/runtime/trace.js";
 import { renderWaterfall } from "../src/runtime/waterfall.js";
+import { collectStaticDiagnosticSensitiveValues } from "../src/server/sensitive-values.js";
+import { sanitizeSpanForOutput } from "../src/trace-sanitization.js";
 import type { BrowserClient } from "../src/types.js";
 
 type CliArgs = {
@@ -100,6 +110,9 @@ export async function main() {
 		const providerDirectory = resolve(process.cwd(), args.providerPath);
 		const providerEntry = resolveProviderEntry(providerDirectory);
 		const provider = await loadProvider(providerEntry);
+		const staticSensitiveValues = compileProcessDiagnosticSensitiveValues(
+			collectStaticDiagnosticSensitiveValues(provider),
+		);
 		const providerId = basename(providerDirectory);
 		const config = await loadApiFuseConfig(process.cwd());
 		const operation = getOperation(provider, args.operation);
@@ -119,6 +132,7 @@ export async function main() {
 			operationName: args.operation,
 			outputSchema,
 			proxyEnabled: false,
+			staticSensitiveValues,
 		});
 
 		let proxySuite: ProfileSuite | undefined;
@@ -135,6 +149,7 @@ export async function main() {
 				operationName: args.operation,
 				outputSchema,
 				proxyEnabled: true,
+				staticSensitiveValues,
 			});
 		}
 
@@ -170,8 +185,8 @@ export async function main() {
 				runs: args.runs,
 				warmup: args.warmup,
 				concurrency: args.concurrency,
-				direct: directSuite,
-				proxy: proxySuite,
+				direct: sanitizeProfileSuiteForExport(directSuite),
+				proxy: proxySuite ? sanitizeProfileSuiteForExport(proxySuite) : undefined,
 				flamePath,
 			});
 			console.log(`Exported JSON: ${resolve(process.cwd(), args.exportPath)}`);
@@ -480,6 +495,7 @@ async function runProfileSuite(options: {
 	operationName: string;
 	outputSchema: { parse(input: unknown): unknown };
 	proxyEnabled: boolean;
+	staticSensitiveValues: CompiledDiagnosticSensitiveValues;
 }): Promise<ProfileSuite> {
 	for (let index = 0; index < options.args.warmup; index += 1) {
 		await profileRun({
@@ -492,6 +508,7 @@ async function runProfileSuite(options: {
 			operationName: options.operationName,
 			outputSchema: options.outputSchema,
 			proxyEnabled: options.proxyEnabled,
+			staticSensitiveValues: options.staticSensitiveValues,
 		});
 	}
 
@@ -509,6 +526,7 @@ async function runProfileSuite(options: {
 				operationName: options.operationName,
 				outputSchema: options.outputSchema,
 				proxyEnabled: options.proxyEnabled,
+				staticSensitiveValues: options.staticSensitiveValues,
 			}),
 		);
 		runs.push(...(await Promise.all(batch)));
@@ -545,6 +563,7 @@ async function profileRun(options: {
 	operationName: string;
 	outputSchema: { parse(input: unknown): unknown };
 	proxyEnabled: boolean;
+	staticSensitiveValues: CompiledDiagnosticSensitiveValues;
 }): Promise<RunResult> {
 	try {
 		return await executeProfileRun({ ...options, forceFixtureReplay: false });
@@ -576,9 +595,16 @@ async function executeProfileRun(options: {
 	operationName: string;
 	outputSchema: { parse(input: unknown): unknown };
 	proxyEnabled: boolean;
+	staticSensitiveValues: CompiledDiagnosticSensitiveValues;
 }): Promise<RunResult> {
 	const _operation = getOperation(options.provider, options.operationName);
-	const traceContext = createTraceContext(resolveTraceContextOptions(options.config.trace));
+	const sensitiveRegistry = createDiagnosticRedactor([], options.staticSensitiveValues);
+	const redact = (text: string) => redactDiagnosticText(text, sensitiveRegistry.redact);
+	const traceContext = createTraceContext({
+		...resolveTraceContextOptions(options.config.trace),
+		redact,
+	});
+	bindDiagnosticSensitiveRegistry(traceContext, sensitiveRegistry);
 	const baseContext = createBaseContext({
 		config: options.config,
 		provider: options.provider,
@@ -650,7 +676,7 @@ function createBaseContext(options: {
 				});
 
 	const env = {
-		get: (key: string) => process.env[key],
+		get: (key: string) => readDiagnosticEnv(key),
 	};
 	const credential = {
 		mode: "none" as const,
@@ -925,6 +951,17 @@ function selectRepresentativeRun(runs: RunResult[]): RunResult {
 	return first;
 }
 
+function sanitizeProfileSuiteForExport(suite: ProfileSuite): ProfileSuite {
+	// The perf CLI has no server request scope; retain the shared output policy on disk.
+	return {
+		...suite,
+		runs: suite.runs.map((run) => ({
+			...run,
+			spans: run.spans.map((span) => sanitizeSpanForOutput(span)),
+		})),
+	};
+}
+
 async function writeExport(filePath: string, payload: unknown): Promise<void> {
 	const absolutePath = resolve(process.cwd(), filePath);
 	await mkdir(dirname(absolutePath), { recursive: true });

package/bin/apifuse-record.ts

@@ -1,4 +1,5 @@
 #!/usr/bin/env bun
+import { readDiagnosticEnv } from "../src/runtime/diagnostic-env.js";
 
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { mkdir, writeFile } from "node:fs/promises";
@@ -519,8 +520,8 @@ export function createCaptureContext(
 		process.env,
 		provider.secrets?.map((secret) => secret.name) ?? [],
 	);
-	const env = { get: (key: string) => providerEnvironment[key] };
-	const engineEnv = { get: (key: string) => process.env[key] };
+	const env = { get: (key: string) => readDiagnosticEnv(key, providerEnvironment) };
+	const engineEnv = { get: (key: string) => readDiagnosticEnv(key) };
 	const engineCredentials = readEngineProxyCredentials();
 	const credential = {
 		mode: "none" as const,

package/dist/config/loader.js

@@ -1,3 +1,4 @@
+import { readDiagnosticEnv } from "../runtime/diagnostic-env.js";
 import { createHash, randomUUID } from "node:crypto";
 import { existsSync } from "node:fs";
 import { createRequire } from "node:module";
@@ -63,17 +64,17 @@ const SMARTPROXY_ALLOCATOR_RETRY_BASE_MS = 25;
 const SMARTPROXY_EXTRACTION_CACHE_TTL_MS = 15_000;
 const SMARTPROXY_EXTRACTION_SOFT_REFRESH_MS = 10_000;
 function redisUrlFromEnv() {
-    return (process.env.APIFUSE__PROVIDER__CACHE_REDIS_URL?.trim() ||
-        process.env[REDIS_URL_ENV]?.trim() ||
+    return (readDiagnosticEnv(PROVIDER_CACHE_REDIS_URL_ENV)?.trim() ||
+        readDiagnosticEnv(REDIS_URL_ENV)?.trim() ||
         undefined);
 }
 export function providerCacheRedisUrlFromEnv() {
     return redisUrlFromEnv();
 }
 export function providerStateRedisUrlFromEnv() {
-    return (process.env[PROVIDER_STATE_REDIS_URL_ENV]?.trim() ||
-        process.env[PROVIDER_CACHE_REDIS_URL_ENV]?.trim() ||
-        process.env[REDIS_URL_ENV]?.trim() ||
+    return (readDiagnosticEnv(PROVIDER_STATE_REDIS_URL_ENV)?.trim() ||
+        readDiagnosticEnv(PROVIDER_CACHE_REDIS_URL_ENV)?.trim() ||
+        readDiagnosticEnv(REDIS_URL_ENV)?.trim() ||
         undefined);
 }
 /** @internal Test-only hook for exercising shared proxy-cache behavior. */
@@ -407,10 +408,10 @@ export async function resolveWithVendor(vendor, policy, options, context) {
     if (vendor === "nodemaven") {
         const startedAt = Date.now();
         const username = (context.credentials === undefined
-            ? process.env[NODEMAVEN_USERNAME_ENV]
+            ? readDiagnosticEnv(NODEMAVEN_USERNAME_ENV)
             : context.credentials[NODEMAVEN_USERNAME_ENV])?.trim();
         const password = (context.credentials === undefined
-            ? process.env[NODEMAVEN_PASSWORD_ENV]
+            ? readDiagnosticEnv(NODEMAVEN_PASSWORD_ENV)
             : context.credentials[NODEMAVEN_PASSWORD_ENV])?.trim();
         const filter = context.credentials === undefined
             ? process.env[NODEMAVEN_FILTER_ENV]
@@ -453,7 +454,7 @@ export async function resolveWithVendor(vendor, policy, options, context) {
     }
     // smartproxy allocation-style vendor.
     const appKey = (context.credentials === undefined
-        ? process.env[SMARTPROXY_APP_KEY_ENV]
+        ? readDiagnosticEnv(SMARTPROXY_APP_KEY_ENV)
         : context.credentials[SMARTPROXY_APP_KEY_ENV])?.trim();
     if (!appKey) {
         // Guarded by vendorHasCredentials; treated as a vendor-internal failure.
@@ -520,14 +521,14 @@ function envDefaultProvider() {
 function vendorHasCredentials(vendor, credentials) {
     if (vendor === "nodemaven") {
         return Boolean((credentials === undefined
-            ? process.env[NODEMAVEN_USERNAME_ENV]
+            ? readDiagnosticEnv(NODEMAVEN_USERNAME_ENV)
             : credentials[NODEMAVEN_USERNAME_ENV])?.trim() &&
             (credentials === undefined
-                ? process.env[NODEMAVEN_PASSWORD_ENV]
+                ? readDiagnosticEnv(NODEMAVEN_PASSWORD_ENV)
                 : credentials[NODEMAVEN_PASSWORD_ENV])?.trim());
     }
     return Boolean((credentials === undefined
-        ? process.env[SMARTPROXY_APP_KEY_ENV]
+        ? readDiagnosticEnv(SMARTPROXY_APP_KEY_ENV)
         : credentials[SMARTPROXY_APP_KEY_ENV])?.trim());
 }
 function missingCredentialEnv(vendor) {
@@ -1178,7 +1179,7 @@ function markSmartproxyCacheInvalidated(options = {}) {
     }
     const lifetimeMinutes = resolveSmartproxyLifetime(policy);
     const appKey = (options.engineCredentials === undefined
-        ? process.env[SMARTPROXY_APP_KEY_ENV]
+        ? readDiagnosticEnv(SMARTPROXY_APP_KEY_ENV)
         : options.engineCredentials[SMARTPROXY_APP_KEY_ENV])?.trim();
     if (!appKey)
         return undefined;

package/dist/engine.js

@@ -1,3 +1,4 @@
+import { readDiagnosticEnv } from "./runtime/diagnostic-env.js";
 import { ProviderError } from "./errors.js";
 import { APIFUSE__RESOLVER__2CAPTCHA__API_KEY, APIFUSE__RESOLVER__CAPMONSTER__API_KEY, APIFUSE__RESOLVER__CAPSOLVER__API_KEY, APIFUSE__RESOLVER__HYPERSOLUTIONS__API_KEY, } from "./runtime/resolver-config.js";
 import { OTEL_EXPORTER_OTLP_ENDPOINT, OTEL_EXPORTER_OTLP_HEADERS, OTEL_EXPORTER_OTLP_TRACES_ENDPOINT, OTEL_EXPORTER_OTLP_TRACES_HEADERS, OTEL_RESOURCE_ATTRIBUTES, OTEL_SERVICE_NAME, } from "./runtime/otlp.js";
@@ -99,7 +100,7 @@ export function isEngineOwnedEnvName(name) {
 /** Capture credentials in the engine host before constructing provider bindings. */
 export function readEngineProxyCredentials(environment = process.env) {
     return Object.fromEntries(ENGINE_OWNED_PROXY_CREDENTIAL_ENV_NAMES.flatMap((name) => {
-        const value = environment[name]?.trim();
+        const value = readDiagnosticEnv(name, environment)?.trim();
         return value ? [[name, value]] : [];
     }));
 }
@@ -108,7 +109,7 @@ export function createProviderEnvironment(environment, declaredNames) {
     return Object.fromEntries(declaredNames.flatMap((name) => {
         if (isEngineOwnedEnvName(name))
             return [];
-        const value = environment[name];
+        const value = readDiagnosticEnv(name, environment);
         return value === undefined ? [] : [[name, value]];
     }));
 }

package/dist/index.d.ts

@@ -45,7 +45,8 @@ export { createUnsupportedProviderRuntimeState, UnsupportedProviderStateError, }
 export { APIFUSE__OCR__API_KEY_ENV, APIFUSE__OCR__BACKEND_ENV, APIFUSE__OCR__BASE_URL_ENV, APIFUSE__OCR__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__OCR__MODEL_ENV, CLOUDFLARE_ACCOUNT_ID_ENV, CLOUDFLARE_WORKERS_AI_OCR_BACKEND, createCloudflareWorkersAiOcrClient, createOcrClientFromEnv, createOpenAiCompatibleOcrClient, createUnsupportedOcrClient, DEFAULT_CLOUDFLARE_WORKERS_AI_OCR_MODEL, extractCaptchaCandidates, OPENAI_COMPATIBLE_OCR_BACKEND, } from "./runtime/ocr.js";
 export { APIFUSE__STT__BACKEND_ENV, APIFUSE__STT__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__STT__MODEL_ENV, createSttClientFromEnv, createUnsupportedSttClient, extractVerificationCode, resolveSttPrompt, } from "./runtime/stt.js";
 export { type CreateTraceContextOptions, createTraceContext, type Span, type TraceContext, } from "./runtime/trace.js";
-export { APIFUSE_CONTENT_PROVENANCE_META_KEY, APIFUSE_CONTENT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, untrustedContent, z, } from "./schema.js";
+export type { DiagnosticRedactor } from "./runtime/diagnostic-redactor.js";
+export { APIFUSE_CONTENT_PROVENANCE_META_KEY, APIFUSE_CONTENT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, publicField, redactPayload, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, untrustedContent, z, } from "./schema.js";
 export { createServerApp, createServerAppAsync, ERROR_OBSERVABILITY_HEADER, type ProviderErrorCauseFrame, type ServeOptions, serve, } from "./server/serve.js";
 export { DEFAULT_STEALTH_BROWSER, DEFAULT_STEALTH_OS, getStealthProfile, listStealthProfiles, } from "./stealth/profiles.js";
 export * from "./stream.js";

package/dist/index.js

@@ -36,7 +36,7 @@ export { createUnsupportedProviderRuntimeState, UnsupportedProviderStateError, }
 export { APIFUSE__OCR__API_KEY_ENV, APIFUSE__OCR__BACKEND_ENV, APIFUSE__OCR__BASE_URL_ENV, APIFUSE__OCR__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__OCR__MODEL_ENV, CLOUDFLARE_ACCOUNT_ID_ENV, CLOUDFLARE_WORKERS_AI_OCR_BACKEND, createCloudflareWorkersAiOcrClient, createOcrClientFromEnv, createOpenAiCompatibleOcrClient, createUnsupportedOcrClient, DEFAULT_CLOUDFLARE_WORKERS_AI_OCR_MODEL, extractCaptchaCandidates, OPENAI_COMPATIBLE_OCR_BACKEND, } from "./runtime/ocr.js";
 export { APIFUSE__STT__BACKEND_ENV, APIFUSE__STT__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__STT__MODEL_ENV, createSttClientFromEnv, createUnsupportedSttClient, extractVerificationCode, resolveSttPrompt, } from "./runtime/stt.js";
 export { createTraceContext, } from "./runtime/trace.js";
-export { APIFUSE_CONTENT_PROVENANCE_META_KEY, APIFUSE_CONTENT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, sensitive, untrustedContent, z, } from "./schema.js";
+export { APIFUSE_CONTENT_PROVENANCE_META_KEY, APIFUSE_CONTENT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, publicField, redactPayload, sensitive, untrustedContent, z, } from "./schema.js";
 export { createServerApp, createServerAppAsync, ERROR_OBSERVABILITY_HEADER, serve, } from "./server/serve.js";
 export { DEFAULT_STEALTH_BROWSER, DEFAULT_STEALTH_OS, getStealthProfile, listStealthProfiles, } from "./stealth/profiles.js";
 export * from "./stream.js";

package/dist/lint.js

@@ -380,17 +380,28 @@ function getChildSchemas(schema) {
 function uniqueFields(fields) {
     return Array.from(new Set(fields));
 }
-function isSensitiveSchema(schema) {
-    if (!schema || typeof schema !== "object" || !("meta" in schema)) {
-        return false;
+function readSensitivityDeclaration(schema, seen = new Set()) {
+    // Declarations sit on the leaf; same-path wrappers such as .optional(),
+    // .nullable(), .pipe() or z.lazy() carry no metadata of their own, so look
+    // through them.
+    if (!isSchema(schema) || seen.has(schema))
+        return undefined;
+    seen.add(schema);
+    const value = Reflect.get(getSchemaMetadata(schema), APIFUSE_SENSITIVE_META_KEY);
+    if (typeof value === "boolean")
+        return value;
+    const def = getSchemaDef(schema);
+    const children = def.type === "pipe"
+        ? [def.in, def.out]
+        : def.type === "lazy" && typeof def.getter === "function"
+            ? [def.getter()]
+            : [def.innerType];
+    for (const child of children) {
+        const declaration = readSensitivityDeclaration(child, seen);
+        if (declaration !== undefined)
+            return declaration;
     }
-    const meta = schema.meta;
-    if (typeof meta !== "function")
-        return false;
-    const metadata = meta.call(schema);
-    return (!!metadata &&
-        typeof metadata === "object" &&
-        Reflect.get(metadata, APIFUSE_SENSITIVE_META_KEY) === true);
+    return undefined;
 }
 function getSchemaMetadata(schema) {
     return schema.meta?.() ?? {};
@@ -416,9 +427,19 @@ const SENSITIVE_FIELD_NAMES = new Set([
     "phonenumber",
     "paymenturl",
 ]);
+// Only phone-shaped keys can hold reviewed public data (facility phones); the
+// rest are credentials, which a public declaration must not launder.
+const PUBLIC_DECLARABLE_FIELD_NAMES = new Set(["phone", "phonenumber"]);
+function normalizeFieldName(name) {
+    return name.toLowerCase().replace(/[-_\s]/g, "");
+}
 function isSensitiveFieldName(name) {
-    const normalized = name.toLowerCase().replace(/[-_\s]/g, "");
-    return SENSITIVE_FIELD_NAMES.has(normalized);
+    return SENSITIVE_FIELD_NAMES.has(normalizeFieldName(name));
+}
+function isDeclaredSensitiveField(key, schema) {
+    const declaration = readSensitivityDeclaration(schema);
+    return (declaration === true ||
+        (declaration === false && PUBLIC_DECLARABLE_FIELD_NAMES.has(normalizeFieldName(key))));
 }
 function collectUnmarkedSensitiveFields(schema, basePath, seen = new Set()) {
     if (!isSchema(schema) || seen.has(schema)) {
@@ -428,7 +449,7 @@ function collectUnmarkedSensitiveFields(schema, basePath, seen = new Set()) {
     const out = [];
     for (const [key, child] of Object.entries(getObjectShape(schema))) {
         const childPath = basePath ? `${basePath}.${key}` : key;
-        if (isSensitiveFieldName(key) && !isSensitiveSchema(child)) {
+        if (isSensitiveFieldName(key) && !isDeclaredSensitiveField(key, child)) {
             out.push(childPath);
         }
         out.push(...collectUnmarkedSensitiveFields(child, childPath, seen));
@@ -1086,7 +1107,7 @@ export function lintOperation(op) {
             rule: "sensitive-field-unmarked",
             level: "warn",
             field,
-            message: `Schema field "${field}" looks sensitive; mark it with fields.*(), field(..., { sensitive: true }), or sensitive(...).`,
+            message: `Schema field "${field}" looks sensitive; mark it with fields.*() or sensitive(...); publicField(...) is accepted only for reviewed public phone-shaped fields.`,
         });
     }
     for (const field of uniqueFields(collectUnmarkedSensitiveFields(op.output, "output"))) {
@@ -1094,7 +1115,7 @@ export function lintOperation(op) {
             rule: "sensitive-field-unmarked",
             level: "warn",
             field,
-            message: `Schema field "${field}" looks sensitive; mark it with fields.*(), field(..., { sensitive: true }), or sensitive(...).`,
+            message: `Schema field "${field}" looks sensitive; mark it with fields.*() or sensitive(...); publicField(...) is accepted only for reviewed public phone-shaped fields.`,
         });
     }
     return diagnostics;

package/dist/provider.d.ts

@@ -12,7 +12,7 @@ export { createProviderEnvironment, createInProcessProviderEngine, ENGINE_OWNED_
 export type { ProviderCapabilityKey, ProviderEngine, ProviderEngineAttachmentInput, ProviderEngineBindingCandidates, ProviderEngineCapabilitySurface, ProviderEngineRequest, ProviderEngineResidentSurface, ProviderEngineSession, ProviderEngineTransport, } from "./engine.js";
 export { getProviderLocalePath, providerLocaleKey, qualifyProviderLocaleKey, } from "./i18n/index.js";
 export { type CreateProviderChoiceContextOptions, createProviderChoiceContext, createTestProviderChoiceContext, PROVIDER_RUNTIME_CHOICE_TOKEN_MASTER_SECRET_ENV, } from "./runtime/choice.js";
-export { APIFUSE_CONTENT_PROVENANCE_META_KEY, APIFUSE_CONTENT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, untrustedContent, z, } from "./schema.js";
+export { APIFUSE_CONTENT_PROVENANCE_META_KEY, APIFUSE_CONTENT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, publicField, redactPayload, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, untrustedContent, z, } from "./schema.js";
 export type { AuthAbortData, AuthAbortRetry, AuthFlowTerminalContext, AuthMode, AuthSafeData, AuthSafeJson, FlowContext, HealthCheckAssertionContext, HealthCheckCase, HealthCheckSuite, HealthCheckUnsupported, HealthJourneyDefinition, HealthJourneyEventContext, HealthJourneyManualTriggerPolicy, HealthJourneyRunContext, HealthJourneyRunResult, HealthScheduleRandomization, HttpRedirectFailureReason, HttpRedirectPolicy, HttpRedirectPolicyMode, HttpRetryOptions, HttpRetrySummary, InferSchemaOutput, NativeContext, NativeNetworkClient, NativeNetworkCloseReason, NativeNetworkConnection, NativeNetworkConnectInput, NativeNetworkConnectOptions, NativeNetworkDynamicGrantOptions, NativeNetworkEgressGrant, NativeProviderConfig, NativeProxyDrainHandler, NativeProxyEgressInfo, NativeProxyExpiringEvent, NativeProxyExpiringReason, NativeTcpDynamicEgressRule, NativeTcpEgressGrant, NativeTcpEgressRule, NativeTcpPortRange, NativeTcpTlsMode, NativeTlsConnectOptions, OperationApprovalPolicy, OperationContractMetadata, OperationDefinition, OperationExample, OperationErrorCode, ProviderErrorStatus, OperationLifecycle, OperationObservabilityConfig, OperationObservabilitySensitiveConfig, OperationRelationships, OperationRiskClass, OperationSensitivePath, OperationTransport, ProviderAccessVisibility, ProviderChoiceBindingOptions, ProviderChoiceConsumeMode, ProviderChoiceConsumeResult, ProviderChoiceContext, ProviderChoiceExplicitParseResult, ProviderChoiceIssueOptions, ProviderChoiceParseOptions, ProviderContext, ProviderContextFor, ProviderDefinition, ProviderDeploymentOverrides, ProviderFileRef, ProviderFilesContext, ProviderLocale, ProviderLocaleKey, ProviderLocaleKeyInput, ProviderLogoProfile, ProviderProxyPolicy, ProxiedOAuthConfig, ProviderPublicConnectionMode, ProviderPublicProfile, ProviderResolvedFile, ProviderRuntimeTarget, ProviderRuntimeState, ProviderStealthConfig, ProviderStateDurationString, ProviderStateNamespace, ProviderSupportLevel, RedirectRunReason, SchemaLike, SmsOtpMatcherDefinition, StandardSchemaV1, StateCasResult, StateNamespaceOptions, StateNamespaceScope, StateValue, StateWriteOptions, StealthChallengeClassification, } from "./types.js";
 export { NativeEgressGrantExpiredError, NativeEgressNotDeclaredError, NativeIdleTimeoutError, NativeNetworkError, NativeProxyExpiredError, } from "./runtime/native-network-errors.js";
 export type { NativeGatewayProxy, NativeGatewayProxyResolutionInput, NativeGatewayProxySkipReason, NativeGatewayProxySynthesizer, NativeGatewayProxySynthesisResult, NativeGatewayProxySynthesisInput, NativeNetworkClientOptions, NativeNetworkErrorCode, VendorCredentialLookup, VendorCredentialResolver, } from "./runtime/native-network.js";

package/dist/provider.js

@@ -7,6 +7,6 @@ export { AuthError, HttpRedirectError, isProviderError, isSessionExpiredError, i
 export { createProviderEnvironment, createInProcessProviderEngine, ENGINE_OWNED_PROXY_CREDENTIAL_ENV_NAMES, ENGINE_OWNED_RESOLVER_CREDENTIAL_ENV_NAMES, ENGINE_OWNED_RUNTIME_ENV_NAMES, ENGINE_OWNED_TELEMETRY_ENV_NAMES, isEngineOwnedEnvName, isEngineOwnedProxyCredentialName, isEngineOwnedResolverCredentialName, isEngineOwnedRuntimeEnvName, isEngineOwnedTelemetryEnvName, PROVIDER_CAPABILITY_KEYS, PROVIDER_ENGINE_PROTOCOL_VERSION, readEngineProxyCredentials, } from "./engine.js";
 export { getProviderLocalePath, providerLocaleKey, qualifyProviderLocaleKey, } from "./i18n/index.js";
 export { createProviderChoiceContext, createTestProviderChoiceContext, PROVIDER_RUNTIME_CHOICE_TOKEN_MASTER_SECRET_ENV, } from "./runtime/choice.js";
-export { APIFUSE_CONTENT_PROVENANCE_META_KEY, APIFUSE_CONTENT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, sensitive, untrustedContent, z, } from "./schema.js";
+export { APIFUSE_CONTENT_PROVENANCE_META_KEY, APIFUSE_CONTENT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, publicField, redactPayload, sensitive, untrustedContent, z, } from "./schema.js";
 export { NativeEgressGrantExpiredError, NativeEgressNotDeclaredError, NativeIdleTimeoutError, NativeNetworkError, NativeProxyExpiredError, } from "./runtime/native-network-errors.js";
 export { HttpRetryAfterPolicy, HttpRetryDelayStrategy, HttpRetryJitter, HttpRetryPreset, HttpRetryUnsafeMethodPolicy, } from "./types.js";

package/dist/runtime/browser.js

@@ -1,3 +1,4 @@
+import { readDiagnosticEnv } from "./diagnostic-env.js";
 import { createRequire } from "node:module";
 import { ProviderError } from "../errors.js";
 const require = createRequire(import.meta.url);
@@ -289,7 +290,7 @@ function createResourcePolicyHandler(policy, allowedMethods) {
     };
 }
 function getDefaultCdpPoolUrl(env = process.env) {
-    return env.APIFUSE__CDP_POOL__URL;
+    return readDiagnosticEnv("APIFUSE__CDP_POOL__URL", env);
 }
 async function importOptionalModule(moduleName) {
     return (await import(moduleName));

package/dist/runtime/cache.js

@@ -1,3 +1,4 @@
+import { readDiagnosticEnv } from "./diagnostic-env.js";
 import { createHash, createHmac } from "node:crypto";
 import { providerCacheRedisUrlFromEnv } from "../config/loader.js";
 import { ProviderError } from "../errors.js";
@@ -279,7 +280,7 @@ async function withRedisFallback(operation) {
 }
 export function createProviderCache(options) {
     const redisUrl = options.redisUrl ?? providerCacheRedisUrlFromEnv();
-    const configuredPepper = process.env[APIFUSE__CACHE__KEY_PEPPER_ENV];
+    const configuredPepper = readDiagnosticEnv(APIFUSE__CACHE__KEY_PEPPER_ENV);
     const pepper = configuredPepper && configuredPepper.length > 0 ? configuredPepper : undefined;
     const backend = getSharedBackend(redisUrl);
     const memoryMaxEntries = Math.max(1, options.memoryMaxEntries ?? DEFAULT_MEMORY_MAX_ENTRIES);
@@ -471,7 +472,7 @@ export function isProviderCacheBypassed(cache) {
     return bypassCaches.has(cache);
 }
 export function createBypassProviderCache(options) {
-    const configuredPepper = process.env[APIFUSE__CACHE__KEY_PEPPER_ENV];
+    const configuredPepper = readDiagnosticEnv(APIFUSE__CACHE__KEY_PEPPER_ENV);
     const pepper = configuredPepper && configuredPepper.length > 0 ? configuredPepper : undefined;
     const events = [];
     const secretScopedKeys = new Set();

package/dist/runtime/diagnostic-env-values.d.ts

@@ -0,0 +1,5 @@
+export declare function resolvedStringVariants(value: string | undefined): string[];
+export declare function urlCredentialComponents(value: string, options: {
+    includePathAndQuery: boolean;
+}): string[];
+export declare function otlpHeaderCredentialValues(value: string): string[];

package/dist/runtime/diagnostic-env-values.js

@@ -0,0 +1,57 @@
+export function resolvedStringVariants(value) {
+    if (value === undefined)
+        return [];
+    return [...new Set([value, value.trim()])].filter((candidate) => candidate.length > 0);
+}
+function decodedComponent(value) {
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        return value;
+    }
+}
+export function urlCredentialComponents(value, options) {
+    let url;
+    try {
+        url = new URL(value.trim());
+    }
+    catch {
+        return [];
+    }
+    const username = decodedComponent(url.username);
+    const password = decodedComponent(url.password);
+    const components = [username, password, username && password ? `${username}:${password}` : ""];
+    if (options.includePathAndQuery) {
+        for (const segment of url.pathname.split("/")) {
+            if (segment)
+                components.push(decodedComponent(segment));
+        }
+        for (const [key, entryValue] of url.searchParams) {
+            if (key)
+                components.push(key);
+            if (entryValue) {
+                components.push(entryValue, `${key}=${entryValue}`);
+            }
+        }
+    }
+    return [...new Set(components.flatMap((component) => resolvedStringVariants(component)))];
+}
+export function otlpHeaderCredentialValues(value) {
+    const variants = resolvedStringVariants(value);
+    for (const member of value.split(",")) {
+        const separator = member.indexOf("=");
+        if (separator <= 0)
+            continue;
+        const headerValue = decodedComponent(member.slice(separator + 1).trim());
+        variants.push(...resolvedStringVariants(headerValue));
+        const headerName = decodedComponent(member.slice(0, separator).trim()).toLowerCase();
+        if (headerName === "authorization" || headerName === "proxy-authorization") {
+            // A transport may echo just the credential without its HTTP auth scheme.
+            const credential = /^(?:Bearer|Basic)\s+(.+)$/i.exec(headerValue)?.[1];
+            if (credential)
+                variants.push(...resolvedStringVariants(credential));
+        }
+    }
+    return [...new Set(variants)];
+}

package/dist/runtime/diagnostic-env.d.ts

@@ -0,0 +1,11 @@
+import { type CompiledDiagnosticSensitiveValues } from "./diagnostic-redactor.js";
+type EnvObserver = (name: string, value: string) => void;
+export interface DiagnosticEnvScope {
+    observe: EnvObserver;
+    finished: boolean;
+    staticValues?: CompiledDiagnosticSensitiveValues;
+}
+/** Resolve and register atomically, before any consumer can use a live env credential. */
+export declare function readDiagnosticEnv(name: string, env?: Readonly<Record<string, string | undefined>>): string | undefined;
+export declare function withDiagnosticEnv<T>(observer: EnvObserver | DiagnosticEnvScope, fn: () => T): T;
+export {};

package/dist/runtime/diagnostic-env.js

@@ -0,0 +1,35 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { resolvedStringVariants, urlCredentialComponents, otlpHeaderCredentialValues, } from "./diagnostic-env-values.js";
+import { registerProcessDiagnosticValues, suppressProcessDiagnosticValues, withAppDiagnosticFallback, } from "./diagnostic-redactor.js";
+const observers = new AsyncLocalStorage();
+/** Resolve and register atomically, before any consumer can use a live env credential. */
+export function readDiagnosticEnv(name, env = process.env) {
+    const value = env[name];
+    if (value !== undefined) {
+        const scope = observers.getStore();
+        if (scope && !scope.finished)
+            scope.observe(name, value);
+        else {
+            // ALS survives the response. Finished requests register into the app's
+            // inherited fallback lifetime, never a dead request's private inventory.
+            if (Buffer.byteLength(value) > 64 * 1024)
+                suppressProcessDiagnosticValues();
+            else
+                registerProcessDiagnosticValues([
+                    ...resolvedStringVariants(value),
+                    ...urlCredentialComponents(value, {
+                        includePathAndQuery: name === "APIFUSE__CDP_POOL__URL",
+                    }),
+                    ...(name === "OTEL_EXPORTER_OTLP_HEADERS" || name === "OTEL_EXPORTER_OTLP_TRACES_HEADERS"
+                        ? otlpHeaderCredentialValues(value)
+                        : []),
+                ]);
+        }
+    }
+    return value;
+}
+export function withDiagnosticEnv(observer, fn) {
+    const scope = typeof observer === "function" ? { observe: observer, finished: false } : observer;
+    const run = () => observers.run(scope, fn);
+    return scope.staticValues ? withAppDiagnosticFallback(scope.staticValues, run) : run();
+}