@arkyn/server 3.0.8 → 3.0.10

package/dist/modules/http/api/_logRequest.js

@@ -1,46 +1,49 @@
 import { flushDebugLogs as e } from "../../utilities/flushDebugLogs.js";
-import { LogService as t } from "../../services/logService.js";
-import { formatJsonObject as n } from "@arkyn/shared";
+import { SENSITIVE_DATA_KEYS as t } from "../../utilities/sensitiveDataKeys.js";
+import { LogService as n } from "../../services/logService.js";
+import { formatJsonObject as r, parseSensitiveData as i } from "@arkyn/shared";
 //#region src/http/api/_logRequest.ts
-async function r(r) {
-	let i = t.getConfig();
-	if (!i) return;
-	let { userToken: a, apiUrl: o, trafficSourceId: s } = i, { elapsedTime: c, method: l, queryParams: u, requestBody: d, requestHeaders: f, responseBody: p, responseHeaders: m, status: h, rawUrl: g } = r;
+async function a(a) {
+	let o = n.getConfig();
+	if (!o) return;
+	let { userToken: s, apiUrl: c, trafficSourceId: l } = o;
+	if (!c) return;
+	let { elapsedTime: u, method: d, queryParams: f, requestBody: p, requestHeaders: m, responseBody: h, responseHeaders: g, status: _, rawUrl: v } = a;
 	if (process.env.NODE_ENV !== "development") try {
-		let t = new URL(g), r = "https";
-		t.protocol === "http:" && (r = "http");
-		let i = JSON.stringify({
-			domainUrl: `${t.protocol}//${t.host}`,
-			pathnameUrl: t.pathname,
-			trafficSourceId: s,
-			status: h,
-			protocol: r,
-			method: l.toLowerCase(),
+		let n = new URL(v), a = "https";
+		n.protocol === "http:" && (a = "http");
+		let o = JSON.stringify({
+			domainUrl: `${n.protocol}//${n.host}`,
+			pathnameUrl: n.pathname,
+			trafficSourceId: l,
+			status: _,
+			protocol: a,
+			method: d.toLowerCase(),
 			trafficUserId: null,
-			elapsedTime: c,
-			requestHeaders: JSON.stringify(f),
-			requestBody: JSON.stringify(d),
-			queryParams: JSON.stringify(u),
-			responseHeaders: JSON.stringify(m),
-			responseBody: JSON.stringify(p)
-		}), _ = {
+			elapsedTime: u,
+			requestHeaders: i(JSON.stringify(m), [...t]),
+			requestBody: i(JSON.stringify(p), [...t]),
+			queryParams: JSON.stringify(f),
+			responseHeaders: i(JSON.stringify(g), [...t]),
+			responseBody: i(JSON.stringify(h), [...t])
+		}), y = {
 			"Content-Type": "application/json",
-			Authorization: `Bearer ${a}`
-		}, v = await fetch(o, {
+			Authorization: `Bearer ${s}`
+		}, b = await fetch(c, {
 			method: "POST",
-			body: i,
-			headers: _
+			body: o,
+			headers: y
 		});
-		if (!v.ok) {
-			let t = await v.text(), r = v.status, i = v.statusText, a = await v.json().catch(() => null);
+		if (!b.ok) {
+			let t = await b.text(), n = b.status, i = b.statusText, a = await b.json().catch(() => null);
 			e({
 				name: "LogError",
 				scheme: "red",
 				debugs: [
 					"Failed to log request.",
-					`Status: ${r} ${i}.`,
+					`Status: ${n} ${i}.`,
 					`Status text: ${t}.`,
-					`JSON Response: ${a ? n(a, 0) : "No JSON response"}`
+					`JSON Response: ${a ? r(a, 0) : "No JSON response"}`
 				]
 			});
 		}
@@ -53,6 +56,6 @@ async function r(r) {
 	}
 }
 //#endregion
-export { r as logRequest };
+export { a as logRequest };
 
 //# sourceMappingURL=_logRequest.js.map

package/dist/modules/http/api/_logRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"_logRequest.js","names":[],"sources":["../../../../src/http/api/_logRequest.ts"],"sourcesContent":["import { formatJsonObject } from \"@arkyn/shared\";\nimport { flushDebugLogs } from \"../..\";\nimport { LogService } from \"../../services/logService\";\n\ntype ConfigProps = {\n\trawUrl: string;\n\tstatus: number;\n\tmethod: \"GET\" | \"POST\" | \"PUT\" | \"DELETE\" | \"PATCH\";\n\ttoken: string | null;\n\telapsedTime: number;\n\trequestHeaders: Record<string, string>;\n\trequestBody: Record<string, string>;\n\tqueryParams: Record<string, string>;\n\tresponseHeaders: Record<string, string>;\n\tresponseBody: Record<string, string>;\n};\n\n/**\n * Sends a request to the inbox flow API with the provided configuration.\n *\n * - This function retrieves the inbox flow configuration using `LogService.getConfig()`.\n * - If the configuration is not available, the function will return early without performing any action.\n * - In a development environment (`NODE_ENV === \"development\"`), the function will also return early.\n * - The request is sent as a POST request to the inbox API URL with the provided configuration details.\n * - If an error occurs during the request, it will be logged using the `httpDebug` service.\n *\n * @param {ConfigProps} config - The configuration object for the request.\n * @param {string} config.rawUrl - The raw URL of the request.\n * @param {number} config.status - The HTTP status code associated with the request.\n * @param {\"GET\" | \"POST\" | \"PUT\" | \"DELETE\" | \"PATCH\"} config.method - The HTTP method used for the request. Can be \"POST\", \"GET\", \"PUT\", \"DELETE\", or \"PATCH\".\n * @param {string | null} config.token - The authentication token for the request.\n * @param {number} config.elapsedTime - The elapsed time for the request in milliseconds.\n * @param {Record<string, string>} config.requestHeaders - The headers sent with the request.\n * @param {Record<string, string>} config.requestBody - The body of the request, if applicable.\n * @param {Record<string, string>} config.queryParams - The query parameters for the request.\n * @param {Record<string, string>} config.responseHeaders - The headers received in the response.\n * @param {Record<string, string>} config.responseBody - The body of the response received.\n *\n * @remarks\n *\n * @returns {Promise<void>} A promise that resolves when the request is complete.\n *\n * @example\n * ```typescript\n * const config = {\n *   rawUrl: \"https://example.com/api/data\",\n *   status: 200,\n *   method: \"GET\",\n *   token: \"auth-token-123\",\n *   elapsedTime: 150,\n *   requestHeaders: { \"Accept\": \"application/json\", \"Authorization\": \"Bearer token123\" },\n *   requestBody: {},\n *   queryParams: { \"page\": \"1\", \"limit\": \"10\" },\n *   responseHeaders: { \"Content-Type\": \"application/json\" },\n *   responseBody: { \"data\": \"example response\" }\n * };\n *\n * await logRequest(config);\n * ```\n */\n\nasync function logRequest(config: ConfigProps): Promise<void> {\n\tconst arkynService = LogService.getConfig();\n\tif (!arkynService) return;\n\n\tconst { userToken, apiUrl, trafficSourceId } = arkynService;\n\n\tconst {\n\t\telapsedTime,\n\t\tmethod,\n\t\tqueryParams,\n\t\trequestBody,\n\t\trequestHeaders,\n\t\tresponseBody,\n\t\tresponseHeaders,\n\t\tstatus,\n\t\trawUrl,\n\t} = config;\n\n\tif (process.env.NODE_ENV === \"development\") return;\n\n\ttry {\n\t\tconst url = new URL(rawUrl);\n\n\t\tlet protocol: \"http\" | \"https\" = \"https\";\n\t\tif (url.protocol === \"http:\") protocol = \"http\";\n\n\t\tconst body = JSON.stringify({\n\t\t\tdomainUrl: `${url.protocol}//${url.host}`,\n\t\t\tpathnameUrl: url.pathname,\n\t\t\ttrafficSourceId: trafficSourceId,\n\t\t\tstatus,\n\t\t\tprotocol,\n\t\t\tmethod: method.toLowerCase(),\n\t\t\ttrafficUserId: null,\n\t\t\telapsedTime,\n\t\t\trequestHeaders: JSON.stringify(requestHeaders),\n\t\t\trequestBody: JSON.stringify(requestBody),\n\t\t\tqueryParams: JSON.stringify(queryParams),\n\t\t\tresponseHeaders: JSON.stringify(responseHeaders),\n\t\t\tresponseBody: JSON.stringify(responseBody),\n\t\t});\n\n\t\tconst headers = {\n\t\t\t\"Content-Type\": \"application/json\",\n\t\t\tAuthorization: `Bearer ${userToken}`,\n\t\t};\n\n\t\tconst fetchResponse = await fetch(apiUrl, {\n\t\t\tmethod: \"POST\",\n\t\t\tbody,\n\t\t\theaders,\n\t\t});\n\n\t\tif (!fetchResponse.ok) {\n\t\t\tconst errorText = await fetchResponse.text();\n\t\t\tconst errorStatus = fetchResponse.status;\n\t\t\tconst errorStatusText = fetchResponse.statusText;\n\t\t\tconst jsonResponse = await fetchResponse.json().catch(() => null);\n\n\t\t\tflushDebugLogs({\n\t\t\t\tname: \"LogError\",\n\t\t\t\tscheme: \"red\",\n\t\t\t\tdebugs: [\n\t\t\t\t\t`Failed to log request.`,\n\t\t\t\t\t`Status: ${errorStatus} ${errorStatusText}.`,\n\t\t\t\t\t`Status text: ${errorText}.`,\n\t\t\t\t\t`JSON Response: ${jsonResponse ? formatJsonObject(jsonResponse, 0) : \"No JSON response\"}`,\n\t\t\t\t],\n\t\t\t});\n\t\t}\n\t} catch (err) {\n\t\tflushDebugLogs({\n\t\t\tdebugs: [`Error sending request: ${err}`],\n\t\t\tname: \"LogError\",\n\t\t\tscheme: \"red\",\n\t\t});\n\t}\n}\n\nexport { logRequest };\n"],"mappings":";;;;AA6DA,eAAe,EAAW,GAAoC;CAC7D,IAAM,IAAe,EAAW,UAAU;CAC1C,IAAI,CAAC,GAAc;CAEnB,IAAM,EAAE,cAAW,WAAQ,uBAAoB,GAEzC,EACL,gBACA,WACA,gBACA,gBACA,mBACA,iBACA,oBACA,WACA,cACG;CAEJ,YAAA,IAAA,aAA6B,eAE7B,IAAI;EACH,IAAM,IAAM,IAAI,IAAI,CAAM,GAEtB,IAA6B;EACjC,AAAI,EAAI,aAAa,YAAS,IAAW;EAEzC,IAAM,IAAO,KAAK,UAAU;GAC3B,WAAW,GAAG,EAAI,SAAS,IAAI,EAAI;GACnC,aAAa,EAAI;GACA;GACjB;GACA;GACA,QAAQ,EAAO,YAAY;GAC3B,eAAe;GACf;GACA,gBAAgB,KAAK,UAAU,CAAc;GAC7C,aAAa,KAAK,UAAU,CAAW;GACvC,aAAa,KAAK,UAAU,CAAW;GACvC,iBAAiB,KAAK,UAAU,CAAe;GAC/C,cAAc,KAAK,UAAU,CAAY;EAC1C,CAAC,GAEK,IAAU;GACf,gBAAgB;GAChB,eAAe,UAAU;EAC1B,GAEM,IAAgB,MAAM,MAAM,GAAQ;GACzC,QAAQ;GACR;GACA;EACD,CAAC;EAED,IAAI,CAAC,EAAc,IAAI;GACtB,IAAM,IAAY,MAAM,EAAc,KAAK,GACrC,IAAc,EAAc,QAC5B,IAAkB,EAAc,YAChC,IAAe,MAAM,EAAc,KAAK,CAAC,CAAC,YAAY,IAAI;GAEhE,EAAe;IACd,MAAM;IACN,QAAQ;IACR,QAAQ;KACP;KACA,WAAW,EAAY,GAAG,EAAgB;KAC1C,gBAAgB,EAAU;KAC1B,kBAAkB,IAAe,EAAiB,GAAc,CAAC,IAAI;IACtE;GACD,CAAC;EACF;CACD,SAAS,GAAK;EACb,EAAe;GACd,QAAQ,CAAC,0BAA0B,GAAK;GACxC,MAAM;GACN,QAAQ;EACT,CAAC;CACF;AACD"}
+{"version":3,"file":"_logRequest.js","names":[],"sources":["../../../../src/http/api/_logRequest.ts"],"sourcesContent":["import { formatJsonObject, parseSensitiveData } from \"@arkyn/shared\";\nimport { flushDebugLogs } from \"../..\";\nimport { LogService } from \"../../services/logService\";\nimport { SENSITIVE_DATA_KEYS } from \"../../utilities/sensitiveDataKeys\";\n\ntype ConfigProps = {\n\trawUrl: string;\n\tstatus: number;\n\tmethod: \"GET\" | \"POST\" | \"PUT\" | \"DELETE\" | \"PATCH\";\n\ttoken: string | null;\n\telapsedTime: number;\n\trequestHeaders: Record<string, string>;\n\trequestBody: Record<string, string>;\n\tqueryParams: Record<string, string>;\n\tresponseHeaders: Record<string, string>;\n\tresponseBody: Record<string, string>;\n};\n\n/**\n * Sends a request to the inbox flow API with the provided configuration.\n *\n * - This function retrieves the inbox flow configuration using `LogService.getConfig()`.\n * - If the configuration is not available, the function will return early without performing any action.\n * - In a development environment (`NODE_ENV === \"development\"`), the function will also return early.\n * - The request is sent as a POST request to the inbox API URL with the provided configuration details.\n * - If an error occurs during the request, it will be logged using the `httpDebug` service.\n *\n * @param {ConfigProps} config - The configuration object for the request.\n * @param {string} config.rawUrl - The raw URL of the request.\n * @param {number} config.status - The HTTP status code associated with the request.\n * @param {\"GET\" | \"POST\" | \"PUT\" | \"DELETE\" | \"PATCH\"} config.method - The HTTP method used for the request. Can be \"POST\", \"GET\", \"PUT\", \"DELETE\", or \"PATCH\".\n * @param {string | null} config.token - The authentication token for the request.\n * @param {number} config.elapsedTime - The elapsed time for the request in milliseconds.\n * @param {Record<string, string>} config.requestHeaders - The headers sent with the request.\n * @param {Record<string, string>} config.requestBody - The body of the request, if applicable.\n * @param {Record<string, string>} config.queryParams - The query parameters for the request.\n * @param {Record<string, string>} config.responseHeaders - The headers received in the response.\n * @param {Record<string, string>} config.responseBody - The body of the response received.\n *\n * @remarks\n *\n * @returns {Promise<void>} A promise that resolves when the request is complete.\n *\n * @example\n * ```typescript\n * const config = {\n *   rawUrl: \"https://example.com/api/data\",\n *   status: 200,\n *   method: \"GET\",\n *   token: \"auth-token-123\",\n *   elapsedTime: 150,\n *   requestHeaders: { \"Accept\": \"application/json\", \"Authorization\": \"Bearer token123\" },\n *   requestBody: {},\n *   queryParams: { \"page\": \"1\", \"limit\": \"10\" },\n *   responseHeaders: { \"Content-Type\": \"application/json\" },\n *   responseBody: { \"data\": \"example response\" }\n * };\n *\n * await logRequest(config);\n * ```\n */\n\nasync function logRequest(config: ConfigProps): Promise<void> {\n\tconst arkynService = LogService.getConfig();\n\tif (!arkynService) return;\n\n\tconst { userToken, apiUrl, trafficSourceId } = arkynService;\n\n\t// No endpoint was configured (missing, invalid, or rejected as insecure by\n\t// `LogService.setConfig`) — never fall back to a hardcoded/default destination.\n\tif (!apiUrl) return;\n\n\tconst {\n\t\telapsedTime,\n\t\tmethod,\n\t\tqueryParams,\n\t\trequestBody,\n\t\trequestHeaders,\n\t\tresponseBody,\n\t\tresponseHeaders,\n\t\tstatus,\n\t\trawUrl,\n\t} = config;\n\n\tif (process.env.NODE_ENV === \"development\") return;\n\n\ttry {\n\t\tconst url = new URL(rawUrl);\n\n\t\tlet protocol: \"http\" | \"https\" = \"https\";\n\t\tif (url.protocol === \"http:\") protocol = \"http\";\n\n\t\tconst body = JSON.stringify({\n\t\t\tdomainUrl: `${url.protocol}//${url.host}`,\n\t\t\tpathnameUrl: url.pathname,\n\t\t\ttrafficSourceId: trafficSourceId,\n\t\t\tstatus,\n\t\t\tprotocol,\n\t\t\tmethod: method.toLowerCase(),\n\t\t\ttrafficUserId: null,\n\t\t\telapsedTime,\n\t\t\t// Sensitive fields (Authorization/Cookie headers, password/token/secret\n\t\t\t// body fields, etc.) are masked before this payload ever leaves the\n\t\t\t// process — see `SENSITIVE_DATA_KEYS`.\n\t\t\trequestHeaders: parseSensitiveData(JSON.stringify(requestHeaders), [\n\t\t\t\t...SENSITIVE_DATA_KEYS,\n\t\t\t]),\n\t\t\trequestBody: parseSensitiveData(JSON.stringify(requestBody), [\n\t\t\t\t...SENSITIVE_DATA_KEYS,\n\t\t\t]),\n\t\t\tqueryParams: JSON.stringify(queryParams),\n\t\t\tresponseHeaders: parseSensitiveData(JSON.stringify(responseHeaders), [\n\t\t\t\t...SENSITIVE_DATA_KEYS,\n\t\t\t]),\n\t\t\tresponseBody: parseSensitiveData(JSON.stringify(responseBody), [\n\t\t\t\t...SENSITIVE_DATA_KEYS,\n\t\t\t]),\n\t\t});\n\n\t\tconst headers = {\n\t\t\t\"Content-Type\": \"application/json\",\n\t\t\tAuthorization: `Bearer ${userToken}`,\n\t\t};\n\n\t\tconst fetchResponse = await fetch(apiUrl, {\n\t\t\tmethod: \"POST\",\n\t\t\tbody,\n\t\t\theaders,\n\t\t});\n\n\t\tif (!fetchResponse.ok) {\n\t\t\tconst errorText = await fetchResponse.text();\n\t\t\tconst errorStatus = fetchResponse.status;\n\t\t\tconst errorStatusText = fetchResponse.statusText;\n\t\t\tconst jsonResponse = await fetchResponse.json().catch(() => null);\n\n\t\t\tflushDebugLogs({\n\t\t\t\tname: \"LogError\",\n\t\t\t\tscheme: \"red\",\n\t\t\t\tdebugs: [\n\t\t\t\t\t`Failed to log request.`,\n\t\t\t\t\t`Status: ${errorStatus} ${errorStatusText}.`,\n\t\t\t\t\t`Status text: ${errorText}.`,\n\t\t\t\t\t`JSON Response: ${jsonResponse ? formatJsonObject(jsonResponse, 0) : \"No JSON response\"}`,\n\t\t\t\t],\n\t\t\t});\n\t\t}\n\t} catch (err) {\n\t\tflushDebugLogs({\n\t\t\tdebugs: [`Error sending request: ${err}`],\n\t\t\tname: \"LogError\",\n\t\t\tscheme: \"red\",\n\t\t});\n\t}\n}\n\nexport { logRequest };\n"],"mappings":";;;;;AA8DA,eAAe,EAAW,GAAoC;CAC7D,IAAM,IAAe,EAAW,UAAU;CAC1C,IAAI,CAAC,GAAc;CAEnB,IAAM,EAAE,cAAW,WAAQ,uBAAoB;CAI/C,IAAI,CAAC,GAAQ;CAEb,IAAM,EACL,gBACA,WACA,gBACA,gBACA,mBACA,iBACA,oBACA,WACA,cACG;CAEJ,YAAA,IAAA,aAA6B,eAE7B,IAAI;EACH,IAAM,IAAM,IAAI,IAAI,CAAM,GAEtB,IAA6B;EACjC,AAAI,EAAI,aAAa,YAAS,IAAW;EAEzC,IAAM,IAAO,KAAK,UAAU;GAC3B,WAAW,GAAG,EAAI,SAAS,IAAI,EAAI;GACnC,aAAa,EAAI;GACA;GACjB;GACA;GACA,QAAQ,EAAO,YAAY;GAC3B,eAAe;GACf;GAIA,gBAAgB,EAAmB,KAAK,UAAU,CAAc,GAAG,CAClE,GAAG,CACJ,CAAC;GACD,aAAa,EAAmB,KAAK,UAAU,CAAW,GAAG,CAC5D,GAAG,CACJ,CAAC;GACD,aAAa,KAAK,UAAU,CAAW;GACvC,iBAAiB,EAAmB,KAAK,UAAU,CAAe,GAAG,CACpE,GAAG,CACJ,CAAC;GACD,cAAc,EAAmB,KAAK,UAAU,CAAY,GAAG,CAC9D,GAAG,CACJ,CAAC;EACF,CAAC,GAEK,IAAU;GACf,gBAAgB;GAChB,eAAe,UAAU;EAC1B,GAEM,IAAgB,MAAM,MAAM,GAAQ;GACzC,QAAQ;GACR;GACA;EACD,CAAC;EAED,IAAI,CAAC,EAAc,IAAI;GACtB,IAAM,IAAY,MAAM,EAAc,KAAK,GACrC,IAAc,EAAc,QAC5B,IAAkB,EAAc,YAChC,IAAe,MAAM,EAAc,KAAK,CAAC,CAAC,YAAY,IAAI;GAEhE,EAAe;IACd,MAAM;IACN,QAAQ;IACR,QAAQ;KACP;KACA,WAAW,EAAY,GAAG,EAAgB;KAC1C,gBAAgB,EAAU;KAC1B,kBAAkB,IAAe,EAAiB,GAAc,CAAC,IAAI;IACtE;GACD,CAAC;EACF;CACD,SAAS,GAAK;EACb,EAAe;GACd,QAAQ,CAAC,0BAA0B,GAAK;GACxC,MAAM;GACN,QAAQ;EACT,CAAC;CACF;AACD"}

package/dist/modules/http/badResponses/_badResponse.js

@@ -8,6 +8,7 @@ var r = class {
 	_status = 500;
 	_statusText = "Unknown error";
 	_debugColor = "red";
+	exposeCauseInProduction = !1;
 	get cause() {
 		return this._cause;
 	}
@@ -52,10 +53,11 @@ var r = class {
 		});
 	}
 	makeBody() {
+		let e = process.env.NODE_ENV === "production" && !this.exposeCauseInProduction;
 		return {
 			name: this._name,
 			message: this._statusText,
-			cause: this._cause
+			cause: e ? void 0 : this._cause
 		};
 	}
 };

package/dist/modules/http/badResponses/_badResponse.js.map

@@ -1 +1 @@
-{"version":3,"file":"_badResponse.js","names":[],"sources":["../../../../src/http/badResponses/_badResponse.ts"],"sourcesContent":["import { formatJsonString } from \"@arkyn/shared\";\n\nimport { DebugService } from \"../../services/debugService\";\nimport { flushDebugLogs } from \"../../utilities/flushDebugLogs\";\n\nclass BadResponse {\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tprivate _cause?: any;\n\tprivate _name: string = \"BadResponse\";\n\tprivate _status: number = 500;\n\tprivate _statusText: string = \"Unknown error\";\n\tprivate _debugColor: \"green\" | \"yellow\" | \"cyan\" | \"red\" = \"red\";\n\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tget cause(): any {\n\t\treturn this._cause;\n\t}\n\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tset cause(value: any) {\n\t\tthis._cause = value;\n\t}\n\n\tget name(): string {\n\t\treturn this._name;\n\t}\n\n\tset name(value: string) {\n\t\tthis._name = value;\n\t}\n\n\tget status(): number {\n\t\treturn this._status;\n\t}\n\n\tset status(value: number) {\n\t\tthis._status = value;\n\t}\n\n\tget statusText(): string {\n\t\treturn this._statusText;\n\t}\n\n\tset statusText(value: string) {\n\t\tthis._statusText = value;\n\t}\n\n\tget debugColor(): \"green\" | \"yellow\" | \"cyan\" | \"red\" {\n\t\treturn this._debugColor;\n\t}\n\n\tset debugColor(value: \"green\" | \"yellow\" | \"cyan\" | \"red\") {\n\t\tif (![\"green\", \"yellow\", \"cyan\", \"red\"].includes(value)) return;\n\t\tthis._debugColor = value;\n\t}\n\n\tonDebug() {\n\t\tconst debugs: string[] = [];\n\t\tconst { callerInfo, functionName } = DebugService.getCaller();\n\n\t\tdebugs.push(`Caller Function: ${functionName}`);\n\t\tdebugs.push(`Caller Location: ${callerInfo}`);\n\n\t\tif (this._statusText) debugs.push(`Message: ${this._statusText}`);\n\t\tif (this._cause) {\n\t\t\tdebugs.push(`Cause: ${formatJsonString(JSON.stringify(this._cause))}`);\n\t\t}\n\n\t\tflushDebugLogs({ scheme: \"red\", name: this._name, debugs });\n\t}\n\n\tmakeBody() {\n\t\treturn {\n\t\t\tname: this._name,\n\t\t\tmessage: this._statusText,\n\t\t\tcause: this._cause,\n\t\t};\n\t}\n}\n\nexport { BadResponse };\n"],"mappings":";;;;AAKA,IAAM,IAAN,MAAkB;CAEjB;CACA,QAAwB;CACxB,UAA0B;CAC1B,cAA8B;CAC9B,cAA2D;CAG3D,IAAI,QAAa;EAChB,OAAO,KAAK;CACb;CAGA,IAAI,MAAM,GAAY;EACrB,KAAK,SAAS;CACf;CAEA,IAAI,OAAe;EAClB,OAAO,KAAK;CACb;CAEA,IAAI,KAAK,GAAe;EACvB,KAAK,QAAQ;CACd;CAEA,IAAI,SAAiB;EACpB,OAAO,KAAK;CACb;CAEA,IAAI,OAAO,GAAe;EACzB,KAAK,UAAU;CAChB;CAEA,IAAI,aAAqB;EACxB,OAAO,KAAK;CACb;CAEA,IAAI,WAAW,GAAe;EAC7B,KAAK,cAAc;CACpB;CAEA,IAAI,aAAkD;EACrD,OAAO,KAAK;CACb;CAEA,IAAI,WAAW,GAA4C;EACrD;GAAC;GAAS;GAAU;GAAQ;EAAK,CAAC,CAAC,SAAS,CAAK,MACtD,KAAK,cAAc;CACpB;CAEA,UAAU;EACT,IAAM,IAAmB,CAAC,GACpB,EAAE,eAAY,oBAAiB,EAAa,UAAU;EAU5D,AARA,EAAO,KAAK,oBAAoB,GAAc,GAC9C,EAAO,KAAK,oBAAoB,GAAY,GAExC,KAAK,eAAa,EAAO,KAAK,YAAY,KAAK,aAAa,GAC5D,KAAK,UACR,EAAO,KAAK,UAAU,EAAiB,KAAK,UAAU,KAAK,MAAM,CAAC,GAAG,GAGtE,EAAe;GAAE,QAAQ;GAAO,MAAM,KAAK;GAAO;EAAO,CAAC;CAC3D;CAEA,WAAW;EACV,OAAO;GACN,MAAM,KAAK;GACX,SAAS,KAAK;GACd,OAAO,KAAK;EACb;CACD;AACD"}
+{"version":3,"file":"_badResponse.js","names":[],"sources":["../../../../src/http/badResponses/_badResponse.ts"],"sourcesContent":["import { formatJsonString } from \"@arkyn/shared\";\n\nimport { DebugService } from \"../../services/debugService\";\nimport { flushDebugLogs } from \"../../utilities/flushDebugLogs\";\n\nclass BadResponse {\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tprivate _cause?: any;\n\tprivate _name: string = \"BadResponse\";\n\tprivate _status: number = 500;\n\tprivate _statusText: string = \"Unknown error\";\n\tprivate _debugColor: \"green\" | \"yellow\" | \"cyan\" | \"red\" = \"red\";\n\t/**\n\t * When `false` (the default), `makeBody()` omits `cause` in production so internal\n\t * details (stack traces, SQL, infra info) never reach the client. Subclasses whose\n\t * `cause` is safe, client-facing data (e.g. `UnprocessableEntity`'s form field errors)\n\t * set this to `true`.\n\t */\n\tprotected exposeCauseInProduction = false;\n\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tget cause(): any {\n\t\treturn this._cause;\n\t}\n\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tset cause(value: any) {\n\t\tthis._cause = value;\n\t}\n\n\tget name(): string {\n\t\treturn this._name;\n\t}\n\n\tset name(value: string) {\n\t\tthis._name = value;\n\t}\n\n\tget status(): number {\n\t\treturn this._status;\n\t}\n\n\tset status(value: number) {\n\t\tthis._status = value;\n\t}\n\n\tget statusText(): string {\n\t\treturn this._statusText;\n\t}\n\n\tset statusText(value: string) {\n\t\tthis._statusText = value;\n\t}\n\n\tget debugColor(): \"green\" | \"yellow\" | \"cyan\" | \"red\" {\n\t\treturn this._debugColor;\n\t}\n\n\tset debugColor(value: \"green\" | \"yellow\" | \"cyan\" | \"red\") {\n\t\tif (![\"green\", \"yellow\", \"cyan\", \"red\"].includes(value)) return;\n\t\tthis._debugColor = value;\n\t}\n\n\tonDebug() {\n\t\tconst debugs: string[] = [];\n\t\tconst { callerInfo, functionName } = DebugService.getCaller();\n\n\t\tdebugs.push(`Caller Function: ${functionName}`);\n\t\tdebugs.push(`Caller Location: ${callerInfo}`);\n\n\t\tif (this._statusText) debugs.push(`Message: ${this._statusText}`);\n\t\tif (this._cause) {\n\t\t\tdebugs.push(`Cause: ${formatJsonString(JSON.stringify(this._cause))}`);\n\t\t}\n\n\t\tflushDebugLogs({ scheme: \"red\", name: this._name, debugs });\n\t}\n\n\tmakeBody() {\n\t\tconst isProduction = process.env.NODE_ENV === \"production\";\n\t\tconst hideCause = isProduction && !this.exposeCauseInProduction;\n\n\t\treturn {\n\t\t\tname: this._name,\n\t\t\tmessage: this._statusText,\n\t\t\tcause: hideCause ? undefined : this._cause,\n\t\t};\n\t}\n}\n\nexport { BadResponse };\n"],"mappings":";;;;AAKA,IAAM,IAAN,MAAkB;CAEjB;CACA,QAAwB;CACxB,UAA0B;CAC1B,cAA8B;CAC9B,cAA2D;CAO3D,0BAAoC;CAGpC,IAAI,QAAa;EAChB,OAAO,KAAK;CACb;CAGA,IAAI,MAAM,GAAY;EACrB,KAAK,SAAS;CACf;CAEA,IAAI,OAAe;EAClB,OAAO,KAAK;CACb;CAEA,IAAI,KAAK,GAAe;EACvB,KAAK,QAAQ;CACd;CAEA,IAAI,SAAiB;EACpB,OAAO,KAAK;CACb;CAEA,IAAI,OAAO,GAAe;EACzB,KAAK,UAAU;CAChB;CAEA,IAAI,aAAqB;EACxB,OAAO,KAAK;CACb;CAEA,IAAI,WAAW,GAAe;EAC7B,KAAK,cAAc;CACpB;CAEA,IAAI,aAAkD;EACrD,OAAO,KAAK;CACb;CAEA,IAAI,WAAW,GAA4C;EACrD;GAAC;GAAS;GAAU;GAAQ;EAAK,CAAC,CAAC,SAAS,CAAK,MACtD,KAAK,cAAc;CACpB;CAEA,UAAU;EACT,IAAM,IAAmB,CAAC,GACpB,EAAE,eAAY,oBAAiB,EAAa,UAAU;EAU5D,AARA,EAAO,KAAK,oBAAoB,GAAc,GAC9C,EAAO,KAAK,oBAAoB,GAAY,GAExC,KAAK,eAAa,EAAO,KAAK,YAAY,KAAK,aAAa,GAC5D,KAAK,UACR,EAAO,KAAK,UAAU,EAAiB,KAAK,UAAU,KAAK,MAAM,CAAC,GAAG,GAGtE,EAAe;GAAE,QAAQ;GAAO,MAAM,KAAK;GAAO;EAAO,CAAC;CAC3D;CAEA,WAAW;EAEV,IAAM,IAAA,QAAA,IAAA,aADwC,gBACZ,CAAC,KAAK;EAExC,OAAO;GACN,MAAM,KAAK;GACX,SAAS,KAAK;GACd,OAAO,IAAY,KAAA,IAAY,KAAK;EACrC;CACD;AACD"}

package/dist/modules/http/badResponses/unprocessableEntity.js

@@ -1,11 +1,21 @@
 import { BadResponse as e } from "./_badResponse.js";
+import { SENSITIVE_DATA_KEYS as t } from "../../utilities/sensitiveDataKeys.js";
+import { parseSensitiveData as n } from "@arkyn/shared";
 //#region src/http/badResponses/unprocessableEntity.ts
-var t = class extends e {
+function r(e) {
+	if (e === void 0) return e;
+	try {
+		return JSON.parse(n(JSON.stringify(e), [...t]));
+	} catch {
+		return e;
+	}
+}
+var i = class extends e {
 	constructor(e) {
-		super(), this.name = "UnprocessableEntity", this.status = 422, this.statusText = e.message || "Unprocessable entity", this.debugColor = "yellow", this.cause = {
-			data: e.data,
+		super(), this.name = "UnprocessableEntity", this.status = 422, this.statusText = e.message || "Unprocessable entity", this.debugColor = "yellow", this.exposeCauseInProduction = !0, this.cause = {
+			data: r(e.data),
 			fieldErrors: e.fieldErrors,
-			fields: e.fields
+			fields: r(e.fields)
 		}, this.onDebug();
 	}
 	toResponse() {
@@ -25,6 +35,6 @@ var t = class extends e {
 	}
 };
 //#endregion
-export { t as UnprocessableEntity };
+export { i as UnprocessableEntity };
 
 //# sourceMappingURL=unprocessableEntity.js.map

package/dist/modules/http/badResponses/unprocessableEntity.js.map

@@ -1 +1 @@
-{"version":3,"file":"unprocessableEntity.js","names":[],"sources":["../../../../src/http/badResponses/unprocessableEntity.ts"],"sourcesContent":["import { BadResponse } from \"./_badResponse\";\n\n/**\n * HTTP 422 Unprocessable Entity, the request is well-formed but contains semantic validation errors.\n * Typically used for form field validation failures.\n *\n * @example\n * ```typescript\n * throw new UnprocessableEntity({\n *   message: \"Validation failed\",\n *   fieldErrors: { email: \"Invalid email format\", age: \"Must be 18 or older\" },\n *   fields: { email: \"not-an-email\", age: \"15\" },\n * });\n * ```\n */\nclass UnprocessableEntity extends BadResponse {\n\t/**\n\t * @param props.message - Human-readable description of the error.\n\t * @param props.fieldErrors - Per-field validation messages keyed by field name.\n\t * @param props.fields - Original submitted field values (useful for repopulating forms).\n\t * @param props.data - Any extra data to include in the response body.\n\t */\n\tconstructor(props: {\n\t\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\t\tdata?: any;\n\t\tfieldErrors?: Record<string, string>;\n\t\tfields?: Record<string, string>;\n\t\tmessage?: string;\n\t}) {\n\t\tsuper();\n\n\t\tthis.name = \"UnprocessableEntity\";\n\t\tthis.status = 422;\n\t\tthis.statusText = props.message || \"Unprocessable entity\";\n\t\tthis.debugColor = \"yellow\";\n\t\tthis.cause = {\n\t\t\tdata: props.data,\n\t\t\tfieldErrors: props.fieldErrors,\n\t\t\tfields: props.fields,\n\t\t};\n\n\t\tthis.onDebug();\n\t}\n\n\t/** Converts to a `Response` with `Content-Type: application/json` header. */\n\ttoResponse(): Response {\n\t\tconst responseInit: ResponseInit = {\n\t\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\t\tstatus: this.status,\n\t\t\tstatusText: this.statusText,\n\t\t};\n\n\t\treturn new Response(JSON.stringify(this.makeBody()), responseInit);\n\t}\n\n\t/** Converts to a `Response` using `Response.json()`. Alternative to `toResponse()`. */\n\ttoJson(): Response {\n\t\tconst responseInit: ResponseInit = {\n\t\t\tstatus: this.status,\n\t\t\tstatusText: this.statusText,\n\t\t};\n\n\t\treturn Response.json(this.makeBody(), responseInit);\n\t}\n}\n\nexport { UnprocessableEntity };\n"],"mappings":";;AAeA,IAAM,IAAN,cAAkC,EAAY;CAO7C,YAAY,GAMT;EAaF,AAZA,MAAM,GAEN,KAAK,OAAO,uBACZ,KAAK,SAAS,KACd,KAAK,aAAa,EAAM,WAAW,wBACnC,KAAK,aAAa,UAClB,KAAK,QAAQ;GACZ,MAAM,EAAM;GACZ,aAAa,EAAM;GACnB,QAAQ,EAAM;EACf,GAEA,KAAK,QAAQ;CACd;CAGA,aAAuB;EACtB,IAAM,IAA6B;GAClC,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,QAAQ,KAAK;GACb,YAAY,KAAK;EAClB;EAEA,OAAO,IAAI,SAAS,KAAK,UAAU,KAAK,SAAS,CAAC,GAAG,CAAY;CAClE;CAGA,SAAmB;EAClB,IAAM,IAA6B;GAClC,QAAQ,KAAK;GACb,YAAY,KAAK;EAClB;EAEA,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG,CAAY;CACnD;AACD"}
+{"version":3,"file":"unprocessableEntity.js","names":[],"sources":["../../../../src/http/badResponses/unprocessableEntity.ts"],"sourcesContent":["import { parseSensitiveData } from \"@arkyn/shared\";\nimport { SENSITIVE_DATA_KEYS } from \"../../utilities/sensitiveDataKeys\";\nimport { BadResponse } from \"./_badResponse\";\n\n/**\n * Masks sensitive values (passwords, tokens, etc. — see `SENSITIVE_DATA_KEYS`) inside a\n * form-submission payload before it is echoed back to the client. `fields`/`data` on\n * `UnprocessableEntity` exist to repopulate a form, so submitted secrets must never be\n * returned in cleartext.\n */\nfunction redactSensitiveValues<T>(value: T): T {\n\tif (value === undefined) return value;\n\n\ttry {\n\t\treturn JSON.parse(\n\t\t\tparseSensitiveData(JSON.stringify(value), [...SENSITIVE_DATA_KEYS]),\n\t\t);\n\t} catch {\n\t\treturn value;\n\t}\n}\n\n/**\n * HTTP 422 Unprocessable Entity, the request is well-formed but contains semantic validation errors.\n * Typically used for form field validation failures.\n *\n * @example\n * ```typescript\n * throw new UnprocessableEntity({\n *   message: \"Validation failed\",\n *   fieldErrors: { email: \"Invalid email format\", age: \"Must be 18 or older\" },\n *   fields: { email: \"not-an-email\", age: \"15\" },\n * });\n * ```\n */\nclass UnprocessableEntity extends BadResponse {\n\t/**\n\t * @param props.message - Human-readable description of the error.\n\t * @param props.fieldErrors - Per-field validation messages keyed by field name.\n\t * @param props.fields - Original submitted field values (useful for repopulating forms).\n\t * @param props.data - Any extra data to include in the response body.\n\t */\n\tconstructor(props: {\n\t\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\t\tdata?: any;\n\t\tfieldErrors?: Record<string, string>;\n\t\tfields?: Record<string, string>;\n\t\tmessage?: string;\n\t}) {\n\t\tsuper();\n\n\t\tthis.name = \"UnprocessableEntity\";\n\t\tthis.status = 422;\n\t\tthis.statusText = props.message || \"Unprocessable entity\";\n\t\tthis.debugColor = \"yellow\";\n\t\t// `cause` here is structured, redacted form-validation data meant for the\n\t\t// client (to repopulate the form) — unlike other responses' `cause`, it stays\n\t\t// visible in production.\n\t\tthis.exposeCauseInProduction = true;\n\t\tthis.cause = {\n\t\t\tdata: redactSensitiveValues(props.data),\n\t\t\tfieldErrors: props.fieldErrors,\n\t\t\tfields: redactSensitiveValues(props.fields),\n\t\t};\n\n\t\tthis.onDebug();\n\t}\n\n\t/** Converts to a `Response` with `Content-Type: application/json` header. */\n\ttoResponse(): Response {\n\t\tconst responseInit: ResponseInit = {\n\t\t\theaders: { \"Content-Type\": \"application/json\" },\n\t\t\tstatus: this.status,\n\t\t\tstatusText: this.statusText,\n\t\t};\n\n\t\treturn new Response(JSON.stringify(this.makeBody()), responseInit);\n\t}\n\n\t/** Converts to a `Response` using `Response.json()`. Alternative to `toResponse()`. */\n\ttoJson(): Response {\n\t\tconst responseInit: ResponseInit = {\n\t\t\tstatus: this.status,\n\t\t\tstatusText: this.statusText,\n\t\t};\n\n\t\treturn Response.json(this.makeBody(), responseInit);\n\t}\n}\n\nexport { UnprocessableEntity };\n"],"mappings":";;;;AAUA,SAAS,EAAyB,GAAa;CAC9C,IAAI,MAAU,KAAA,GAAW,OAAO;CAEhC,IAAI;EACH,OAAO,KAAK,MACX,EAAmB,KAAK,UAAU,CAAK,GAAG,CAAC,GAAG,CAAmB,CAAC,CACnE;CACD,QAAQ;EACP,OAAO;CACR;AACD;AAeA,IAAM,IAAN,cAAkC,EAAY;CAO7C,YAAY,GAMT;EAiBF,AAhBA,MAAM,GAEN,KAAK,OAAO,uBACZ,KAAK,SAAS,KACd,KAAK,aAAa,EAAM,WAAW,wBACnC,KAAK,aAAa,UAIlB,KAAK,0BAA0B,IAC/B,KAAK,QAAQ;GACZ,MAAM,EAAsB,EAAM,IAAI;GACtC,aAAa,EAAM;GACnB,QAAQ,EAAsB,EAAM,MAAM;EAC3C,GAEA,KAAK,QAAQ;CACd;CAGA,aAAuB;EACtB,IAAM,IAA6B;GAClC,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,QAAQ,KAAK;GACb,YAAY,KAAK;EAClB;EAEA,OAAO,IAAI,SAAS,KAAK,UAAU,KAAK,SAAS,CAAC,GAAG,CAAY;CAClE;CAGA,SAAmB;EAClB,IAAM,IAA6B;GAClC,QAAQ,KAAK;GACb,YAAY,KAAK;EAClB;EAEA,OAAO,SAAS,KAAK,KAAK,SAAS,GAAG,CAAY;CACnD;AACD"}

package/dist/modules/services/apiService.js

@@ -1,11 +1,13 @@
 import { flushDebugLogs as e } from "../utilities/flushDebugLogs.js";
-import { deleteRequest as t } from "../http/api/_deleteRequest.js";
-import { getRequest as n } from "../http/api/_getRequest.js";
-import { patchRequest as r } from "../http/api/_patchRequest.js";
-import { postRequest as i } from "../http/api/_postRequest.js";
-import { putRequest as a } from "../http/api/_putRequest.js";
+import { SENSITIVE_DATA_KEYS as t } from "../utilities/sensitiveDataKeys.js";
+import { deleteRequest as n } from "../http/api/_deleteRequest.js";
+import { getRequest as r } from "../http/api/_getRequest.js";
+import { patchRequest as i } from "../http/api/_patchRequest.js";
+import { postRequest as a } from "../http/api/_postRequest.js";
+import { putRequest as o } from "../http/api/_putRequest.js";
+import { parseSensitiveData as s } from "@arkyn/shared";
 //#region src/services/apiService.ts
-var o = class {
+var c = class c {
 	baseUrl;
 	baseHeaders;
 	baseToken;
@@ -13,10 +15,20 @@ var o = class {
 	constructor(e) {
 		this.baseUrl = e.baseUrl, this.baseHeaders = e.baseHeaders || void 0, this.baseToken = e.baseToken || void 0, this.enableDebug = e.enableDebug || !1;
 	}
+	static toPlainHeaders(e) {
+		return e instanceof Headers ? Object.fromEntries(e.entries()) : Object.fromEntries(new Headers(e).entries());
+	}
+	static toRedactedJson(e) {
+		return s(JSON.stringify(e), [...t]);
+	}
 	onDebug(t, n, r) {
 		if (this.enableDebug) {
-			let i = [], a = (e) => JSON.stringify(e, null, 2);
-			i.push(`Base URL: ${this.baseUrl}`), i.push(`Endpoint: ${t}`), i.push(`Status/Method: ${n} => ${r.status}`), i.push(`Message: ${r.message}`), r.headers && i.push(`Headers: ${a(r.headers)}`), r.body && i.push(`Body: ${a(r.body)}`), e({
+			let i = [];
+			if (i.push(`Base URL: ${this.baseUrl}`), i.push(`Endpoint: ${t}`), i.push(`Status/Method: ${n} => ${r.status}`), i.push(`Message: ${r.message}`), r.headers) {
+				let e = c.toPlainHeaders(r.headers);
+				i.push(`Headers: ${c.toRedactedJson(e)}`);
+			}
+			r.body && i.push(`Body: ${c.toRedactedJson(r.body)}`), e({
 				debugs: i,
 				name: "ApiDebug",
 				scheme: "yellow"
@@ -37,19 +49,19 @@ var o = class {
 		}), n;
 	}
 	async get(e, t) {
-		let r = this.generateHeaders(t?.headers || {}, t?.token), i = await n({
+		let n = this.generateHeaders(t?.headers || {}, t?.token), i = await r({
 			url: this.baseUrl + e,
 			urlParams: t?.urlParams || {},
-			headers: r
+			headers: n
 		});
 		return this.onDebug(e, "get", {
-			headers: r,
+			headers: n,
 			message: i.message,
 			status: i.status
 		}), i;
 	}
 	async post(e, t) {
-		let n = this.generateHeaders(t?.headers || {}, t?.token), r = t?.body, a = await i({
+		let n = this.generateHeaders(t?.headers || {}, t?.token), r = t?.body, i = await a({
 			url: this.baseUrl + e,
 			urlParams: t?.urlParams || {},
 			headers: n,
@@ -58,12 +70,12 @@ var o = class {
 		return this.onDebug(e, "post", {
 			headers: n,
 			body: r,
-			message: a.message,
-			status: a.status
-		}), a;
+			message: i.message,
+			status: i.status
+		}), i;
 	}
 	async put(e, t) {
-		let n = this.generateHeaders(t?.headers || {}, t?.token), r = t?.body, i = await a({
+		let n = this.generateHeaders(t?.headers || {}, t?.token), r = t?.body, i = await o({
 			url: this.baseUrl + e,
 			urlParams: t?.urlParams || {},
 			headers: n,
@@ -77,23 +89,23 @@ var o = class {
 		}), i;
 	}
 	async patch(e, t) {
-		let n = this.generateHeaders(t?.headers || {}, t?.token), i = t?.body, a = await r({
+		let n = this.generateHeaders(t?.headers || {}, t?.token), r = t?.body, a = await i({
 			url: this.baseUrl + e,
 			urlParams: t?.urlParams || {},
 			headers: n,
-			body: i
+			body: r
 		});
 		return this.onDebug(e, "patch", {
 			headers: n,
-			body: i,
+			body: r,
 			message: a.message,
 			status: a.status
 		}), a;
 	}
-	async delete(e, n) {
-		let r = this.generateHeaders(n?.headers || {}, n?.token), i = n?.body, a = await t({
+	async delete(e, t) {
+		let r = this.generateHeaders(t?.headers || {}, t?.token), i = t?.body, a = await n({
 			url: this.baseUrl + e,
-			urlParams: n?.urlParams || {},
+			urlParams: t?.urlParams || {},
 			headers: r,
 			body: i
 		});
@@ -106,6 +118,6 @@ var o = class {
 	}
 };
 //#endregion
-export { o as ApiService };
+export { c as ApiService };
 
 //# sourceMappingURL=apiService.js.map

package/dist/modules/services/apiService.js.map

@@ -1 +1 @@
-{"version":3,"file":"apiService.js","names":[],"sources":["../../../src/services/apiService.ts"],"sourcesContent":["import { deleteRequest } from \"../http/api/_deleteRequest\";\nimport { getRequest } from \"../http/api/_getRequest\";\nimport { patchRequest } from \"../http/api/_patchRequest\";\nimport { postRequest } from \"../http/api/_postRequest\";\nimport { putRequest } from \"../http/api/_putRequest\";\nimport { flushDebugLogs } from \"../utilities/flushDebugLogs\";\n\ntype ApiServiceConstructorProps = {\n\t/** Base URL prepended to every request path (e.g. `\"https://api.example.com\"`). */\n\tbaseUrl: string;\n\t/** Default headers merged into every request. */\n\tbaseHeaders?: HeadersInit;\n\t/** Default Bearer token; can be overridden per request via `data.token`. */\n\tbaseToken?: string | null;\n\t/** When `true`, logs each request and response to the console in development. */\n\tenableDebug?: boolean;\n};\n\ntype ApiRequestDataWithoutBodyProps = {\n\theaders?: HeadersInit;\n\ttoken?: string;\n\turlParams?: Record<string, string>;\n};\n\ntype ApiRequestDataWithBodyProps = {\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tbody?: any;\n\theaders?: HeadersInit;\n\ttoken?: string;\n\turlParams?: Record<string, string>;\n};\n\ntype DebugConfig = {\n\theaders?: HeadersInit;\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tbody?: any;\n\tstatus: number;\n\tmessage: string;\n};\n\n/**\n * HTTP client for external API calls. Wraps fetch with base URL, default headers, optional auth token,\n * and per-request overrides for all standard HTTP methods.\n *\n * @example\n * ```typescript\n * const api = new ApiService({\n *   baseUrl: \"https://api.example.com\",\n *   baseToken: session.token,\n *   enableDebug: true,\n * });\n *\n * const { data } = await api.get(\"/users/me\");\n * const { data: created } = await api.post(\"/orders\", { body: { productId: 1 } });\n * ```\n */\nclass ApiService {\n\tprivate baseUrl: string;\n\tprivate baseHeaders?: HeadersInit;\n\tprivate baseToken?: string;\n\tprivate enableDebug?: boolean;\n\n\tconstructor(props: ApiServiceConstructorProps) {\n\t\tthis.baseUrl = props.baseUrl;\n\t\tthis.baseHeaders = props.baseHeaders || undefined;\n\t\tthis.baseToken = props.baseToken || undefined;\n\t\tthis.enableDebug = props.enableDebug || false;\n\t}\n\n\tprivate onDebug(endpoint: string, method: string, data: DebugConfig) {\n\t\tif (this.enableDebug) {\n\t\t\tconst debugs: string[] = [];\n\t\t\tconst json = (data: unknown) => JSON.stringify(data, null, 2);\n\n\t\t\tdebugs.push(`Base URL: ${this.baseUrl}`);\n\t\t\tdebugs.push(`Endpoint: ${endpoint}`);\n\t\t\tdebugs.push(`Status/Method: ${method} => ${data.status}`);\n\t\t\tdebugs.push(`Message: ${data.message}`);\n\n\t\t\tif (data.headers) debugs.push(`Headers: ${json(data.headers)}`);\n\t\t\tif (data.body) debugs.push(`Body: ${json(data.body)}`);\n\n\t\t\tflushDebugLogs({ debugs, name: \"ApiDebug\", scheme: \"yellow\" });\n\t\t}\n\t}\n\n\tprivate generateHeaders(\n\t\tinitHeaders: HeadersInit,\n\t\ttoken?: string,\n\t): HeadersInit {\n\t\tlet headers: HeadersInit = {};\n\t\tif (this.baseToken) headers = { Authorization: `Bearer ${this.baseToken}` };\n\t\tif (this.baseHeaders) headers = { ...headers, ...this.baseHeaders };\n\n\t\tif (initHeaders) headers = { ...headers, ...initHeaders };\n\t\tif (token) headers = { ...headers, Authorization: `Bearer ${token}` };\n\n\t\treturn headers;\n\t}\n\n\t/**\n\t * Sends a get request to the specified endpoint.\n\t * @param endpoint - The API endpoint to send the get request to.\n\t * @param data - The request data, including optional headers and token.\n\t * @returns The API response data.\n\t */\n\n\tasync get(endpoint: string, data?: ApiRequestDataWithoutBodyProps) {\n\t\tconst headers = this.generateHeaders(data?.headers || {}, data?.token);\n\n\t\tconst response = await getRequest({\n\t\t\turl: this.baseUrl + endpoint,\n\t\t\turlParams: data?.urlParams || {},\n\t\t\theaders,\n\t\t});\n\n\t\tthis.onDebug(endpoint, \"get\", {\n\t\t\theaders,\n\t\t\tmessage: response.message,\n\t\t\tstatus: response.status,\n\t\t});\n\n\t\treturn response;\n\t}\n\n\t/**\n\t * Sends a post request to the specified endpoint.\n\t * @param endpoint - The API endpoint to send the post request to.\n\t * @param data - The request data, including body, optional headers, and token.\n\t * @returns The API response data.\n\t */\n\n\tasync post(endpoint: string, data?: ApiRequestDataWithBodyProps) {\n\t\tconst headers = this.generateHeaders(data?.headers || {}, data?.token);\n\t\tconst body = data?.body;\n\n\t\tconst response = await postRequest({\n\t\t\turl: this.baseUrl + endpoint,\n\t\t\turlParams: data?.urlParams || {},\n\t\t\theaders,\n\t\t\tbody,\n\t\t});\n\n\t\tthis.onDebug(endpoint, \"post\", {\n\t\t\theaders,\n\t\t\tbody,\n\t\t\tmessage: response.message,\n\t\t\tstatus: response.status,\n\t\t});\n\n\t\treturn response;\n\t}\n\n\t/**\n\t * Sends a put request to the specified endpoint.\n\t * @param endpoint - The API endpoint to send the put request to.\n\t * @param data - The request data, including body, optional headers, and token.\n\t * @returns The API response data.\n\t */\n\n\tasync put(endpoint: string, data?: ApiRequestDataWithBodyProps) {\n\t\tconst headers = this.generateHeaders(data?.headers || {}, data?.token);\n\t\tconst body = data?.body;\n\n\t\tconst response = await putRequest({\n\t\t\turl: this.baseUrl + endpoint,\n\t\t\turlParams: data?.urlParams || {},\n\t\t\theaders,\n\t\t\tbody,\n\t\t});\n\n\t\tthis.onDebug(endpoint, \"put\", {\n\t\t\theaders,\n\t\t\tbody,\n\t\t\tmessage: response.message,\n\t\t\tstatus: response.status,\n\t\t});\n\n\t\treturn response;\n\t}\n\n\t/**\n\t * Sends a patch request to the specified endpoint.\n\t * @param endpoint - The API endpoint to send the patch request to.\n\t * @param data - The request data, including body, optional headers, and token.\n\t * @returns The API response data.\n\t */\n\n\tasync patch(endpoint: string, data?: ApiRequestDataWithBodyProps) {\n\t\tconst headers = this.generateHeaders(data?.headers || {}, data?.token);\n\t\tconst body = data?.body;\n\n\t\tconst response = await patchRequest({\n\t\t\turl: this.baseUrl + endpoint,\n\t\t\turlParams: data?.urlParams || {},\n\t\t\theaders,\n\t\t\tbody,\n\t\t});\n\n\t\tthis.onDebug(endpoint, \"patch\", {\n\t\t\theaders,\n\t\t\tbody,\n\t\t\tmessage: response.message,\n\t\t\tstatus: response.status,\n\t\t});\n\n\t\treturn response;\n\t}\n\n\t/**\n\t * Sends a delete request to the specified endpoint.\n\t * @param endpoint - The API endpoint to send the delete request to.\n\t * @param data - The request data, including body, optional headers, and token.\n\t * @returns The API response data.\n\t */\n\n\tasync delete(endpoint: string, data?: ApiRequestDataWithBodyProps) {\n\t\tconst headers = this.generateHeaders(data?.headers || {}, data?.token);\n\t\tconst body = data?.body;\n\n\t\tconst response = await deleteRequest({\n\t\t\turl: this.baseUrl + endpoint,\n\t\t\turlParams: data?.urlParams || {},\n\t\t\theaders,\n\t\t\tbody,\n\t\t});\n\n\t\tthis.onDebug(endpoint, \"delete\", {\n\t\t\theaders,\n\t\t\tbody,\n\t\t\tmessage: response.message,\n\t\t\tstatus: response.status,\n\t\t});\n\n\t\treturn response;\n\t}\n}\n\nexport { ApiService };\n"],"mappings":";;;;;;;AAwDA,IAAM,IAAN,MAAiB;CAChB;CACA;CACA;CACA;CAEA,YAAY,GAAmC;EAI9C,AAHA,KAAK,UAAU,EAAM,SACrB,KAAK,cAAc,EAAM,eAAe,KAAA,GACxC,KAAK,YAAY,EAAM,aAAa,KAAA,GACpC,KAAK,cAAc,EAAM,eAAe;CACzC;CAEA,QAAgB,GAAkB,GAAgB,GAAmB;EACpE,IAAI,KAAK,aAAa;GACrB,IAAM,IAAmB,CAAC,GACpB,KAAQ,MAAkB,KAAK,UAAU,GAAM,MAAM,CAAC;GAU5D,AARA,EAAO,KAAK,aAAa,KAAK,SAAS,GACvC,EAAO,KAAK,aAAa,GAAU,GACnC,EAAO,KAAK,kBAAkB,EAAO,MAAM,EAAK,QAAQ,GACxD,EAAO,KAAK,YAAY,EAAK,SAAS,GAElC,EAAK,WAAS,EAAO,KAAK,YAAY,EAAK,EAAK,OAAO,GAAG,GAC1D,EAAK,QAAM,EAAO,KAAK,SAAS,EAAK,EAAK,IAAI,GAAG,GAErD,EAAe;IAAE;IAAQ,MAAM;IAAY,QAAQ;GAAS,CAAC;EAC9D;CACD;CAEA,gBACC,GACA,GACc;EACd,IAAI,IAAuB,CAAC;EAO5B,OANI,KAAK,cAAW,IAAU,EAAE,eAAe,UAAU,KAAK,YAAY,IACtE,KAAK,gBAAa,IAAU;GAAE,GAAG;GAAS,GAAG,KAAK;EAAY,IAE9D,MAAa,IAAU;GAAE,GAAG;GAAS,GAAG;EAAY,IACpD,MAAO,IAAU;GAAE,GAAG;GAAS,eAAe,UAAU;EAAQ,IAE7D;CACR;CASA,MAAM,IAAI,GAAkB,GAAuC;EAClE,IAAM,IAAU,KAAK,gBAAgB,GAAM,WAAW,CAAC,GAAG,GAAM,KAAK,GAE/D,IAAW,MAAM,EAAW;GACjC,KAAK,KAAK,UAAU;GACpB,WAAW,GAAM,aAAa,CAAC;GAC/B;EACD,CAAC;EAQD,OANA,KAAK,QAAQ,GAAU,OAAO;GAC7B;GACA,SAAS,EAAS;GAClB,QAAQ,EAAS;EAClB,CAAC,GAEM;CACR;CASA,MAAM,KAAK,GAAkB,GAAoC;EAChE,IAAM,IAAU,KAAK,gBAAgB,GAAM,WAAW,CAAC,GAAG,GAAM,KAAK,GAC/D,IAAO,GAAM,MAEb,IAAW,MAAM,EAAY;GAClC,KAAK,KAAK,UAAU;GACpB,WAAW,GAAM,aAAa,CAAC;GAC/B;GACA;EACD,CAAC;EASD,OAPA,KAAK,QAAQ,GAAU,QAAQ;GAC9B;GACA;GACA,SAAS,EAAS;GAClB,QAAQ,EAAS;EAClB,CAAC,GAEM;CACR;CASA,MAAM,IAAI,GAAkB,GAAoC;EAC/D,IAAM,IAAU,KAAK,gBAAgB,GAAM,WAAW,CAAC,GAAG,GAAM,KAAK,GAC/D,IAAO,GAAM,MAEb,IAAW,MAAM,EAAW;GACjC,KAAK,KAAK,UAAU;GACpB,WAAW,GAAM,aAAa,CAAC;GAC/B;GACA;EACD,CAAC;EASD,OAPA,KAAK,QAAQ,GAAU,OAAO;GAC7B;GACA;GACA,SAAS,EAAS;GAClB,QAAQ,EAAS;EAClB,CAAC,GAEM;CACR;CASA,MAAM,MAAM,GAAkB,GAAoC;EACjE,IAAM,IAAU,KAAK,gBAAgB,GAAM,WAAW,CAAC,GAAG,GAAM,KAAK,GAC/D,IAAO,GAAM,MAEb,IAAW,MAAM,EAAa;GACnC,KAAK,KAAK,UAAU;GACpB,WAAW,GAAM,aAAa,CAAC;GAC/B;GACA;EACD,CAAC;EASD,OAPA,KAAK,QAAQ,GAAU,SAAS;GAC/B;GACA;GACA,SAAS,EAAS;GAClB,QAAQ,EAAS;EAClB,CAAC,GAEM;CACR;CASA,MAAM,OAAO,GAAkB,GAAoC;EAClE,IAAM,IAAU,KAAK,gBAAgB,GAAM,WAAW,CAAC,GAAG,GAAM,KAAK,GAC/D,IAAO,GAAM,MAEb,IAAW,MAAM,EAAc;GACpC,KAAK,KAAK,UAAU;GACpB,WAAW,GAAM,aAAa,CAAC;GAC/B;GACA;EACD,CAAC;EASD,OAPA,KAAK,QAAQ,GAAU,UAAU;GAChC;GACA;GACA,SAAS,EAAS;GAClB,QAAQ,EAAS;EAClB,CAAC,GAEM;CACR;AACD"}
+{"version":3,"file":"apiService.js","names":[],"sources":["../../../src/services/apiService.ts"],"sourcesContent":["import { parseSensitiveData } from \"@arkyn/shared\";\nimport { deleteRequest } from \"../http/api/_deleteRequest\";\nimport { getRequest } from \"../http/api/_getRequest\";\nimport { patchRequest } from \"../http/api/_patchRequest\";\nimport { postRequest } from \"../http/api/_postRequest\";\nimport { putRequest } from \"../http/api/_putRequest\";\nimport { flushDebugLogs } from \"../utilities/flushDebugLogs\";\nimport { SENSITIVE_DATA_KEYS } from \"../utilities/sensitiveDataKeys\";\n\ntype ApiServiceConstructorProps = {\n\t/** Base URL prepended to every request path (e.g. `\"https://api.example.com\"`). */\n\tbaseUrl: string;\n\t/** Default headers merged into every request. */\n\tbaseHeaders?: HeadersInit;\n\t/** Default Bearer token; can be overridden per request via `data.token`. */\n\tbaseToken?: string | null;\n\t/** When `true`, logs each request and response to the console in development. */\n\tenableDebug?: boolean;\n};\n\ntype ApiRequestDataWithoutBodyProps = {\n\theaders?: HeadersInit;\n\ttoken?: string;\n\turlParams?: Record<string, string>;\n};\n\ntype ApiRequestDataWithBodyProps = {\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tbody?: any;\n\theaders?: HeadersInit;\n\ttoken?: string;\n\turlParams?: Record<string, string>;\n};\n\ntype DebugConfig = {\n\theaders?: HeadersInit;\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tbody?: any;\n\tstatus: number;\n\tmessage: string;\n};\n\n/**\n * HTTP client for external API calls. Wraps fetch with base URL, default headers, optional auth token,\n * and per-request overrides for all standard HTTP methods.\n *\n * @example\n * ```typescript\n * const api = new ApiService({\n *   baseUrl: \"https://api.example.com\",\n *   baseToken: session.token,\n *   enableDebug: true,\n * });\n *\n * const { data } = await api.get(\"/users/me\");\n * const { data: created } = await api.post(\"/orders\", { body: { productId: 1 } });\n * ```\n */\nclass ApiService {\n\tprivate baseUrl: string;\n\tprivate baseHeaders?: HeadersInit;\n\tprivate baseToken?: string;\n\tprivate enableDebug?: boolean;\n\n\tconstructor(props: ApiServiceConstructorProps) {\n\t\tthis.baseUrl = props.baseUrl;\n\t\tthis.baseHeaders = props.baseHeaders || undefined;\n\t\tthis.baseToken = props.baseToken || undefined;\n\t\tthis.enableDebug = props.enableDebug || false;\n\t}\n\n\t/**\n\t * Converts a `HeadersInit` value into a plain object so it can be safely\n\t * JSON-serialized and redacted, regardless of whether it was provided as a\n\t * `Headers` instance, a plain object, or an array of tuples.\n\t */\n\tprivate static toPlainHeaders(headers: HeadersInit): Record<string, string> {\n\t\tif (headers instanceof Headers)\n\t\t\treturn Object.fromEntries(headers.entries());\n\t\treturn Object.fromEntries(new Headers(headers).entries());\n\t}\n\n\t/**\n\t * Serializes a value to JSON and masks sensitive fields (e.g. `Authorization`\n\t * headers, `password`/`token`/`secret` body fields) before it is written to the\n\t * debug output. See `SENSITIVE_DATA_KEYS`.\n\t */\n\tprivate static toRedactedJson(value: unknown): string {\n\t\treturn parseSensitiveData(JSON.stringify(value), [...SENSITIVE_DATA_KEYS]);\n\t}\n\n\tprivate onDebug(endpoint: string, method: string, data: DebugConfig) {\n\t\tif (this.enableDebug) {\n\t\t\tconst debugs: string[] = [];\n\n\t\t\tdebugs.push(`Base URL: ${this.baseUrl}`);\n\t\t\tdebugs.push(`Endpoint: ${endpoint}`);\n\t\t\tdebugs.push(`Status/Method: ${method} => ${data.status}`);\n\t\t\tdebugs.push(`Message: ${data.message}`);\n\n\t\t\tif (data.headers) {\n\t\t\t\tconst plainHeaders = ApiService.toPlainHeaders(data.headers);\n\t\t\t\tdebugs.push(`Headers: ${ApiService.toRedactedJson(plainHeaders)}`);\n\t\t\t}\n\t\t\tif (data.body)\n\t\t\t\tdebugs.push(`Body: ${ApiService.toRedactedJson(data.body)}`);\n\n\t\t\tflushDebugLogs({ debugs, name: \"ApiDebug\", scheme: \"yellow\" });\n\t\t}\n\t}\n\n\tprivate generateHeaders(\n\t\tinitHeaders: HeadersInit,\n\t\ttoken?: string,\n\t): HeadersInit {\n\t\tlet headers: HeadersInit = {};\n\t\tif (this.baseToken) headers = { Authorization: `Bearer ${this.baseToken}` };\n\t\tif (this.baseHeaders) headers = { ...headers, ...this.baseHeaders };\n\n\t\tif (initHeaders) headers = { ...headers, ...initHeaders };\n\t\tif (token) headers = { ...headers, Authorization: `Bearer ${token}` };\n\n\t\treturn headers;\n\t}\n\n\t/**\n\t * Sends a get request to the specified endpoint.\n\t * @param endpoint - The API endpoint to send the get request to.\n\t * @param data - The request data, including optional headers and token.\n\t * @returns The API response data.\n\t */\n\n\tasync get(endpoint: string, data?: ApiRequestDataWithoutBodyProps) {\n\t\tconst headers = this.generateHeaders(data?.headers || {}, data?.token);\n\n\t\tconst response = await getRequest({\n\t\t\turl: this.baseUrl + endpoint,\n\t\t\turlParams: data?.urlParams || {},\n\t\t\theaders,\n\t\t});\n\n\t\tthis.onDebug(endpoint, \"get\", {\n\t\t\theaders,\n\t\t\tmessage: response.message,\n\t\t\tstatus: response.status,\n\t\t});\n\n\t\treturn response;\n\t}\n\n\t/**\n\t * Sends a post request to the specified endpoint.\n\t * @param endpoint - The API endpoint to send the post request to.\n\t * @param data - The request data, including body, optional headers, and token.\n\t * @returns The API response data.\n\t */\n\n\tasync post(endpoint: string, data?: ApiRequestDataWithBodyProps) {\n\t\tconst headers = this.generateHeaders(data?.headers || {}, data?.token);\n\t\tconst body = data?.body;\n\n\t\tconst response = await postRequest({\n\t\t\turl: this.baseUrl + endpoint,\n\t\t\turlParams: data?.urlParams || {},\n\t\t\theaders,\n\t\t\tbody,\n\t\t});\n\n\t\tthis.onDebug(endpoint, \"post\", {\n\t\t\theaders,\n\t\t\tbody,\n\t\t\tmessage: response.message,\n\t\t\tstatus: response.status,\n\t\t});\n\n\t\treturn response;\n\t}\n\n\t/**\n\t * Sends a put request to the specified endpoint.\n\t * @param endpoint - The API endpoint to send the put request to.\n\t * @param data - The request data, including body, optional headers, and token.\n\t * @returns The API response data.\n\t */\n\n\tasync put(endpoint: string, data?: ApiRequestDataWithBodyProps) {\n\t\tconst headers = this.generateHeaders(data?.headers || {}, data?.token);\n\t\tconst body = data?.body;\n\n\t\tconst response = await putRequest({\n\t\t\turl: this.baseUrl + endpoint,\n\t\t\turlParams: data?.urlParams || {},\n\t\t\theaders,\n\t\t\tbody,\n\t\t});\n\n\t\tthis.onDebug(endpoint, \"put\", {\n\t\t\theaders,\n\t\t\tbody,\n\t\t\tmessage: response.message,\n\t\t\tstatus: response.status,\n\t\t});\n\n\t\treturn response;\n\t}\n\n\t/**\n\t * Sends a patch request to the specified endpoint.\n\t * @param endpoint - The API endpoint to send the patch request to.\n\t * @param data - The request data, including body, optional headers, and token.\n\t * @returns The API response data.\n\t */\n\n\tasync patch(endpoint: string, data?: ApiRequestDataWithBodyProps) {\n\t\tconst headers = this.generateHeaders(data?.headers || {}, data?.token);\n\t\tconst body = data?.body;\n\n\t\tconst response = await patchRequest({\n\t\t\turl: this.baseUrl + endpoint,\n\t\t\turlParams: data?.urlParams || {},\n\t\t\theaders,\n\t\t\tbody,\n\t\t});\n\n\t\tthis.onDebug(endpoint, \"patch\", {\n\t\t\theaders,\n\t\t\tbody,\n\t\t\tmessage: response.message,\n\t\t\tstatus: response.status,\n\t\t});\n\n\t\treturn response;\n\t}\n\n\t/**\n\t * Sends a delete request to the specified endpoint.\n\t * @param endpoint - The API endpoint to send the delete request to.\n\t * @param data - The request data, including body, optional headers, and token.\n\t * @returns The API response data.\n\t */\n\n\tasync delete(endpoint: string, data?: ApiRequestDataWithBodyProps) {\n\t\tconst headers = this.generateHeaders(data?.headers || {}, data?.token);\n\t\tconst body = data?.body;\n\n\t\tconst response = await deleteRequest({\n\t\t\turl: this.baseUrl + endpoint,\n\t\t\turlParams: data?.urlParams || {},\n\t\t\theaders,\n\t\t\tbody,\n\t\t});\n\n\t\tthis.onDebug(endpoint, \"delete\", {\n\t\t\theaders,\n\t\t\tbody,\n\t\t\tmessage: response.message,\n\t\t\tstatus: response.status,\n\t\t});\n\n\t\treturn response;\n\t}\n}\n\nexport { ApiService };\n"],"mappings":";;;;;;;;;AA0DA,IAAM,IAAN,MAAM,EAAW;CAChB;CACA;CACA;CACA;CAEA,YAAY,GAAmC;EAI9C,AAHA,KAAK,UAAU,EAAM,SACrB,KAAK,cAAc,EAAM,eAAe,KAAA,GACxC,KAAK,YAAY,EAAM,aAAa,KAAA,GACpC,KAAK,cAAc,EAAM,eAAe;CACzC;CAOA,OAAe,eAAe,GAA8C;EAG3E,OAFI,aAAmB,UACf,OAAO,YAAY,EAAQ,QAAQ,CAAC,IACrC,OAAO,YAAY,IAAI,QAAQ,CAAO,CAAC,CAAC,QAAQ,CAAC;CACzD;CAOA,OAAe,eAAe,GAAwB;EACrD,OAAO,EAAmB,KAAK,UAAU,CAAK,GAAG,CAAC,GAAG,CAAmB,CAAC;CAC1E;CAEA,QAAgB,GAAkB,GAAgB,GAAmB;EACpE,IAAI,KAAK,aAAa;GACrB,IAAM,IAAmB,CAAC;GAO1B,IALA,EAAO,KAAK,aAAa,KAAK,SAAS,GACvC,EAAO,KAAK,aAAa,GAAU,GACnC,EAAO,KAAK,kBAAkB,EAAO,MAAM,EAAK,QAAQ,GACxD,EAAO,KAAK,YAAY,EAAK,SAAS,GAElC,EAAK,SAAS;IACjB,IAAM,IAAe,EAAW,eAAe,EAAK,OAAO;IAC3D,EAAO,KAAK,YAAY,EAAW,eAAe,CAAY,GAAG;GAClE;GAIA,AAHI,EAAK,QACR,EAAO,KAAK,SAAS,EAAW,eAAe,EAAK,IAAI,GAAG,GAE5D,EAAe;IAAE;IAAQ,MAAM;IAAY,QAAQ;GAAS,CAAC;EAC9D;CACD;CAEA,gBACC,GACA,GACc;EACd,IAAI,IAAuB,CAAC;EAO5B,OANI,KAAK,cAAW,IAAU,EAAE,eAAe,UAAU,KAAK,YAAY,IACtE,KAAK,gBAAa,IAAU;GAAE,GAAG;GAAS,GAAG,KAAK;EAAY,IAE9D,MAAa,IAAU;GAAE,GAAG;GAAS,GAAG;EAAY,IACpD,MAAO,IAAU;GAAE,GAAG;GAAS,eAAe,UAAU;EAAQ,IAE7D;CACR;CASA,MAAM,IAAI,GAAkB,GAAuC;EAClE,IAAM,IAAU,KAAK,gBAAgB,GAAM,WAAW,CAAC,GAAG,GAAM,KAAK,GAE/D,IAAW,MAAM,EAAW;GACjC,KAAK,KAAK,UAAU;GACpB,WAAW,GAAM,aAAa,CAAC;GAC/B;EACD,CAAC;EAQD,OANA,KAAK,QAAQ,GAAU,OAAO;GAC7B;GACA,SAAS,EAAS;GAClB,QAAQ,EAAS;EAClB,CAAC,GAEM;CACR;CASA,MAAM,KAAK,GAAkB,GAAoC;EAChE,IAAM,IAAU,KAAK,gBAAgB,GAAM,WAAW,CAAC,GAAG,GAAM,KAAK,GAC/D,IAAO,GAAM,MAEb,IAAW,MAAM,EAAY;GAClC,KAAK,KAAK,UAAU;GACpB,WAAW,GAAM,aAAa,CAAC;GAC/B;GACA;EACD,CAAC;EASD,OAPA,KAAK,QAAQ,GAAU,QAAQ;GAC9B;GACA;GACA,SAAS,EAAS;GAClB,QAAQ,EAAS;EAClB,CAAC,GAEM;CACR;CASA,MAAM,IAAI,GAAkB,GAAoC;EAC/D,IAAM,IAAU,KAAK,gBAAgB,GAAM,WAAW,CAAC,GAAG,GAAM,KAAK,GAC/D,IAAO,GAAM,MAEb,IAAW,MAAM,EAAW;GACjC,KAAK,KAAK,UAAU;GACpB,WAAW,GAAM,aAAa,CAAC;GAC/B;GACA;EACD,CAAC;EASD,OAPA,KAAK,QAAQ,GAAU,OAAO;GAC7B;GACA;GACA,SAAS,EAAS;GAClB,QAAQ,EAAS;EAClB,CAAC,GAEM;CACR;CASA,MAAM,MAAM,GAAkB,GAAoC;EACjE,IAAM,IAAU,KAAK,gBAAgB,GAAM,WAAW,CAAC,GAAG,GAAM,KAAK,GAC/D,IAAO,GAAM,MAEb,IAAW,MAAM,EAAa;GACnC,KAAK,KAAK,UAAU;GACpB,WAAW,GAAM,aAAa,CAAC;GAC/B;GACA;EACD,CAAC;EASD,OAPA,KAAK,QAAQ,GAAU,SAAS;GAC/B;GACA;GACA,SAAS,EAAS;GAClB,QAAQ,EAAS;EAClB,CAAC,GAEM;CACR;CASA,MAAM,OAAO,GAAkB,GAAoC;EAClE,IAAM,IAAU,KAAK,gBAAgB,GAAM,WAAW,CAAC,GAAG,GAAM,KAAK,GAC/D,IAAO,GAAM,MAEb,IAAW,MAAM,EAAc;GACpC,KAAK,KAAK,UAAU;GACpB,WAAW,GAAM,aAAa,CAAC;GAC/B;GACA;EACD,CAAC;EASD,OAPA,KAAK,QAAQ,GAAU,UAAU;GAChC;GACA;GACA,SAAS,EAAS;GAClB,QAAQ,EAAS;EAClB,CAAC,GAEM;CACR;AACD"}

package/dist/modules/services/logService.js

@@ -1,23 +1,41 @@
+import { flushDebugLogs as e } from "../utilities/flushDebugLogs.js";
 //#region src/services/logService.ts
-var e = class e {
+var t = class t {
 	static config;
-	static setConfig(t) {
-		if (e.config) return;
-		let { trafficSourceId: n, userToken: r, logBaseApiUrl: i } = t;
-		e.config = {
-			trafficSourceId: n,
-			userToken: r,
-			apiUrl: `${i || "http://62.238.8.44:8081"}/ingest-log`
+	static isSecureEndpoint(e) {
+		return e.protocol === "https:" ? !0 : e.hostname === "localhost" || e.hostname === "127.0.0.1";
+	}
+	static setConfig(n) {
+		if (t.config) return;
+		let { trafficSourceId: r, userToken: i, logBaseApiUrl: a } = n, o = null;
+		if (a) try {
+			let n = new URL(a);
+			t.isSecureEndpoint(n) ? o = `${a}/ingest-log` : e({
+				name: "LogServiceError",
+				scheme: "red",
+				debugs: [`Insecure logBaseApiUrl "${a}" rejected: use https://, or http:// only for localhost/127.0.0.1. Remote logging disabled.`]
+			});
+		} catch {
+			e({
+				name: "LogServiceError",
+				scheme: "red",
+				debugs: [`Invalid logBaseApiUrl "${a}". Remote logging disabled.`]
+			});
+		}
+		t.config = {
+			trafficSourceId: r,
+			userToken: i,
+			apiUrl: o
 		};
 	}
 	static getConfig() {
-		return e.config;
+		return t.config;
 	}
 	static resetConfig() {
-		e.config = void 0;
+		t.config = void 0;
 	}
 };
 //#endregion
-export { e as LogService };
+export { t as LogService };
 
 //# sourceMappingURL=logService.js.map

package/dist/modules/services/logService.js.map

@@ -1 +1 @@
-{"version":3,"file":"logService.js","names":[],"sources":["../../../src/services/logService.ts"],"sourcesContent":["/**\n * Static service for log endpoint configuration and access.\n *\n * Stores a singleton configuration containing the traffic source identifier,\n * user token, and log ingestion URL.\n */\nclass LogService {\n\tprivate static config?: {\n\t\ttrafficSourceId: string;\n\t\tuserToken: string;\n\t\tapiUrl: string;\n\t};\n\n\t/**\n\t * Sets the log service configuration once. Subsequent calls are ignored.\n\t *\n\t * @param config.trafficSourceId - Traffic source identifier.\n\t * @param config.userToken - User token for authentication.\n\t * @param config.logBaseApiUrl - Override the default log ingestion base URL.\n\t */\n\tstatic setConfig(config: {\n\t\ttrafficSourceId: string;\n\t\tuserToken: string;\n\t\tlogBaseApiUrl?: string;\n\t}): void {\n\t\tif (LogService.config) return;\n\n\t\tconst { trafficSourceId, userToken, logBaseApiUrl } = config;\n\t\tconst baseUrl = logBaseApiUrl || `http://62.238.8.44:8081`;\n\t\tconst apiUrl = `${baseUrl}/ingest-log`;\n\n\t\tLogService.config = { trafficSourceId, userToken, apiUrl };\n\t}\n\n\t/** Returns the stored configuration, or `undefined` if `setConfig` has not been called. */\n\tstatic getConfig():\n\t\t| { trafficSourceId: string; userToken: string; apiUrl: string }\n\t\t| undefined {\n\t\treturn LogService.config;\n\t}\n\n\t/**\n\t * Resets the stored configuration, allowing a new initialization.\n\t */\n\tstatic resetConfig() {\n\t\tLogService.config = undefined;\n\t}\n}\n\nexport { LogService };\n"],"mappings":";AAMA,IAAM,IAAN,MAAM,EAAW;CAChB,OAAe;CAaf,OAAO,UAAU,GAIR;EACR,IAAI,EAAW,QAAQ;EAEvB,IAAM,EAAE,oBAAiB,cAAW,qBAAkB;EAItD,EAAW,SAAS;GAAE;GAAiB;GAAW,QAAA,GAHlC,KAAiB,0BACP;EAE+B;CAC1D;CAGA,OAAO,YAEM;EACZ,OAAO,EAAW;CACnB;CAKA,OAAO,cAAc;EACpB,EAAW,SAAS,KAAA;CACrB;AACD"}
+{"version":3,"file":"logService.js","names":[],"sources":["../../../src/services/logService.ts"],"sourcesContent":["import { flushDebugLogs } from \"../utilities/flushDebugLogs\";\n\n/**\n * Static service for log endpoint configuration and access.\n *\n * Stores a singleton configuration containing the traffic source identifier,\n * user token, and log ingestion URL.\n */\nclass LogService {\n\tprivate static config?: {\n\t\ttrafficSourceId: string;\n\t\tuserToken: string;\n\t\tapiUrl: string | null;\n\t};\n\n\t/**\n\t * Checks whether a log ingestion URL is safe to send telemetry to: `https://`\n\t * is always accepted, and plain `http://` is only accepted for local development\n\t * (`localhost` / `127.0.0.1`). Every other `http://` destination is rejected so\n\t * request/response data is never transmitted in plaintext over the network.\n\t */\n\tprivate static isSecureEndpoint(url: URL): boolean {\n\t\tif (url.protocol === \"https:\") return true;\n\t\treturn url.hostname === \"localhost\" || url.hostname === \"127.0.0.1\";\n\t}\n\n\t/**\n\t * Sets the log service configuration once. Subsequent calls are ignored.\n\t *\n\t * There is no hardcoded fallback endpoint: if `logBaseApiUrl` is omitted, invalid,\n\t * or points at an insecure (`http://`) non-local destination, remote log delivery\n\t * is disabled (`getConfig().apiUrl` is `null`) instead of silently sending data to\n\t * a default/insecure host — `logRequest` skips the network call in that case.\n\t *\n\t * @param config.trafficSourceId - Traffic source identifier.\n\t * @param config.userToken - User token for authentication.\n\t * @param config.logBaseApiUrl - Log ingestion base URL. Must be `https://`, or\n\t * `http://localhost`/`http://127.0.0.1` for local development.\n\t */\n\tstatic setConfig(config: {\n\t\ttrafficSourceId: string;\n\t\tuserToken: string;\n\t\tlogBaseApiUrl?: string;\n\t}): void {\n\t\tif (LogService.config) return;\n\n\t\tconst { trafficSourceId, userToken, logBaseApiUrl } = config;\n\t\tlet apiUrl: string | null = null;\n\n\t\tif (logBaseApiUrl) {\n\t\t\ttry {\n\t\t\t\tconst parsedUrl = new URL(logBaseApiUrl);\n\n\t\t\t\tif (LogService.isSecureEndpoint(parsedUrl)) {\n\t\t\t\t\tapiUrl = `${logBaseApiUrl}/ingest-log`;\n\t\t\t\t} else {\n\t\t\t\t\tflushDebugLogs({\n\t\t\t\t\t\tname: \"LogServiceError\",\n\t\t\t\t\t\tscheme: \"red\",\n\t\t\t\t\t\tdebugs: [\n\t\t\t\t\t\t\t`Insecure logBaseApiUrl \"${logBaseApiUrl}\" rejected: use https://, or http:// only for localhost/127.0.0.1. Remote logging disabled.`,\n\t\t\t\t\t\t],\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t} catch {\n\t\t\t\tflushDebugLogs({\n\t\t\t\t\tname: \"LogServiceError\",\n\t\t\t\t\tscheme: \"red\",\n\t\t\t\t\tdebugs: [\n\t\t\t\t\t\t`Invalid logBaseApiUrl \"${logBaseApiUrl}\". Remote logging disabled.`,\n\t\t\t\t\t],\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\tLogService.config = { trafficSourceId, userToken, apiUrl };\n\t}\n\n\t/** Returns the stored configuration, or `undefined` if `setConfig` has not been called. */\n\tstatic getConfig():\n\t\t| { trafficSourceId: string; userToken: string; apiUrl: string | null }\n\t\t| undefined {\n\t\treturn LogService.config;\n\t}\n\n\t/**\n\t * Resets the stored configuration, allowing a new initialization.\n\t */\n\tstatic resetConfig() {\n\t\tLogService.config = undefined;\n\t}\n}\n\nexport { LogService };\n"],"mappings":";;AAQA,IAAM,IAAN,MAAM,EAAW;CAChB,OAAe;CAYf,OAAe,iBAAiB,GAAmB;EAElD,OADI,EAAI,aAAa,WAAiB,KAC/B,EAAI,aAAa,eAAe,EAAI,aAAa;CACzD;CAeA,OAAO,UAAU,GAIR;EACR,IAAI,EAAW,QAAQ;EAEvB,IAAM,EAAE,oBAAiB,cAAW,qBAAkB,GAClD,IAAwB;EAE5B,IAAI,GACH,IAAI;GACH,IAAM,IAAY,IAAI,IAAI,CAAa;GAEvC,AAAI,EAAW,iBAAiB,CAAS,IACxC,IAAS,GAAG,EAAc,eAE1B,EAAe;IACd,MAAM;IACN,QAAQ;IACR,QAAQ,CACP,2BAA2B,EAAc,4FAC1C;GACD,CAAC;EAEH,QAAQ;GACP,EAAe;IACd,MAAM;IACN,QAAQ;IACR,QAAQ,CACP,0BAA0B,EAAc,4BACzC;GACD,CAAC;EACF;EAGD,EAAW,SAAS;GAAE;GAAiB;GAAW;EAAO;CAC1D;CAGA,OAAO,YAEM;EACZ,OAAO,EAAW;CACnB;CAKA,OAAO,cAAc;EACpB,EAAW,SAAS,KAAA;CACrB;AACD"}

package/dist/modules/utilities/decodeRequestBody.js

@@ -1,22 +1,27 @@
 import { BadRequest as e } from "../http/badResponses/badRequest.js";
 //#region src/utilities/decodeRequestBody.ts
-async function t(t) {
-	let n, r = await t.arrayBuffer(), i = new TextDecoder().decode(r);
+var t = 5 * 1024 * 1024;
+async function n(n, r) {
+	let i, a = r?.maxBodySizeBytes ?? t, o = Number(n.headers.get("content-length"));
+	if (Number.isFinite(o) && o > a) throw new e("Request body exceeds the maximum allowed size");
+	let s = await n.arrayBuffer();
+	if (s.byteLength > a) throw new e("Request body exceeds the maximum allowed size");
+	let c = new TextDecoder().decode(s);
 	try {
-		n = JSON.parse(i);
+		i = JSON.parse(c);
 	} catch {
 		try {
-			if (i.includes("=")) {
-				let e = new URLSearchParams(i);
-				n = Object.fromEntries(e.entries());
+			if (c.includes("=")) {
+				let e = new URLSearchParams(c);
+				i = Object.fromEntries(e.entries());
 			} else throw new e("Invalid URLSearchParams format");
 		} catch {
 			throw new e("Failed to extract data from request");
 		}
 	}
-	return n;
+	return i;
 }
 //#endregion
-export { t as decodeRequestBody };
+export { n as decodeRequestBody };
 
 //# sourceMappingURL=decodeRequestBody.js.map

package/dist/modules/utilities/decodeRequestBody.js.map

@@ -1 +1 @@
-{"version":3,"file":"decodeRequestBody.js","names":[],"sources":["../../../src/utilities/decodeRequestBody.ts"],"sourcesContent":["import { BadRequest } from \"../http/badResponses/badRequest\";\n\n/**\n * Decodes a request body into a plain object, trying JSON first then URL-encoded form data.\n * Throws `BadRequest` if neither format can be parsed.\n *\n * @param request - The incoming request whose body will be decoded.\n * @returns The decoded body as a plain object.\n *\n * @example\n * ```typescript\n * export async function action({ request }: ActionFunctionArgs) {\n *   const body = await decodeRequestBody(request);\n *   // body is now a plain JS object\n * }\n * ```\n */\n\n// biome-ignore lint/suspicious/noExplicitAny: intentional\nasync function decodeRequestBody(request: Request): Promise<any> {\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tlet data: any;\n\n\tconst arrayBuffer = await request.arrayBuffer();\n\tconst text = new TextDecoder().decode(arrayBuffer);\n\n\ttry {\n\t\tdata = JSON.parse(text);\n\t} catch (_jsonError) {\n\t\ttry {\n\t\t\tif (text.includes(\"=\")) {\n\t\t\t\tconst formData = new URLSearchParams(text);\n\t\t\t\tdata = Object.fromEntries(formData.entries());\n\t\t\t} else {\n\t\t\t\tthrow new BadRequest(\"Invalid URLSearchParams format\");\n\t\t\t}\n\t\t} catch (_formDataError) {\n\t\t\tthrow new BadRequest(\"Failed to extract data from request\");\n\t\t}\n\t}\n\n\treturn data;\n}\n\nexport { decodeRequestBody };\n"],"mappings":";;AAmBA,eAAe,EAAkB,GAAgC;CAEhE,IAAI,GAEE,IAAc,MAAM,EAAQ,YAAY,GACxC,IAAO,IAAI,YAAY,CAAC,CAAC,OAAO,CAAW;CAEjD,IAAI;EACH,IAAO,KAAK,MAAM,CAAI;CACvB,QAAqB;EACpB,IAAI;GACH,IAAI,EAAK,SAAS,GAAG,GAAG;IACvB,IAAM,IAAW,IAAI,gBAAgB,CAAI;IACzC,IAAO,OAAO,YAAY,EAAS,QAAQ,CAAC;GAC7C,OACC,MAAM,IAAI,EAAW,gCAAgC;EAEvD,QAAyB;GACxB,MAAM,IAAI,EAAW,qCAAqC;EAC3D;CACD;CAEA,OAAO;AACR"}
+{"version":3,"file":"decodeRequestBody.js","names":[],"sources":["../../../src/utilities/decodeRequestBody.ts"],"sourcesContent":["import { BadRequest } from \"../http/badResponses/badRequest\";\n\n/** Default maximum accepted request body size (5 MB) when `maxBodySizeBytes` isn't set. */\nconst DEFAULT_MAX_BODY_SIZE_BYTES = 5 * 1024 * 1024;\n\ntype DecodeRequestBodyOptions = {\n\t/** Max accepted body size in bytes. Larger bodies are rejected with `BadRequest`. @default 5242880 (5 MB) */\n\tmaxBodySizeBytes?: number;\n};\n\n/**\n * Decodes a request body into a plain object, trying JSON first then URL-encoded form data.\n * Throws `BadRequest` if neither format can be parsed, or if the body exceeds `maxBodySizeBytes`.\n *\n * @param request - The incoming request whose body will be decoded.\n * @param options.maxBodySizeBytes - Max accepted body size in bytes. Default: 5 MB.\n * @returns The decoded body as a plain object.\n *\n * @example\n * ```typescript\n * export async function action({ request }: ActionFunctionArgs) {\n *   const body = await decodeRequestBody(request);\n *   // body is now a plain JS object\n * }\n * ```\n */\n\nasync function decodeRequestBody(\n\trequest: Request,\n\toptions?: DecodeRequestBodyOptions,\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n): Promise<any> {\n\t// biome-ignore lint/suspicious/noExplicitAny: intentional\n\tlet data: any;\n\n\tconst maxBodySizeBytes =\n\t\toptions?.maxBodySizeBytes ?? DEFAULT_MAX_BODY_SIZE_BYTES;\n\n\tconst contentLength = Number(request.headers.get(\"content-length\"));\n\tif (Number.isFinite(contentLength) && contentLength > maxBodySizeBytes) {\n\t\tthrow new BadRequest(\"Request body exceeds the maximum allowed size\");\n\t}\n\n\tconst arrayBuffer = await request.arrayBuffer();\n\n\tif (arrayBuffer.byteLength > maxBodySizeBytes) {\n\t\tthrow new BadRequest(\"Request body exceeds the maximum allowed size\");\n\t}\n\n\tconst text = new TextDecoder().decode(arrayBuffer);\n\n\ttry {\n\t\tdata = JSON.parse(text);\n\t} catch (_jsonError) {\n\t\ttry {\n\t\t\tif (text.includes(\"=\")) {\n\t\t\t\tconst formData = new URLSearchParams(text);\n\t\t\t\tdata = Object.fromEntries(formData.entries());\n\t\t\t} else {\n\t\t\t\tthrow new BadRequest(\"Invalid URLSearchParams format\");\n\t\t\t}\n\t\t} catch (_formDataError) {\n\t\t\tthrow new BadRequest(\"Failed to extract data from request\");\n\t\t}\n\t}\n\n\treturn data;\n}\n\nexport { decodeRequestBody };\n"],"mappings":";;AAGA,IAAM,IAA8B,IAAI,OAAO;AAwB/C,eAAe,EACd,GACA,GAEe;CAEf,IAAI,GAEE,IACL,GAAS,oBAAoB,GAExB,IAAgB,OAAO,EAAQ,QAAQ,IAAI,gBAAgB,CAAC;CAClE,IAAI,OAAO,SAAS,CAAa,KAAK,IAAgB,GACrD,MAAM,IAAI,EAAW,+CAA+C;CAGrE,IAAM,IAAc,MAAM,EAAQ,YAAY;CAE9C,IAAI,EAAY,aAAa,GAC5B,MAAM,IAAI,EAAW,+CAA+C;CAGrE,IAAM,IAAO,IAAI,YAAY,CAAC,CAAC,OAAO,CAAW;CAEjD,IAAI;EACH,IAAO,KAAK,MAAM,CAAI;CACvB,QAAqB;EACpB,IAAI;GACH,IAAI,EAAK,SAAS,GAAG,GAAG;IACvB,IAAM,IAAW,IAAI,gBAAgB,CAAI;IACzC,IAAO,OAAO,YAAY,EAAS,QAAQ,CAAC;GAC7C,OACC,MAAM,IAAI,EAAW,gCAAgC;EAEvD,QAAyB;GACxB,MAAM,IAAI,EAAW,qCAAqC;EAC3D;CACD;CAEA,OAAO;AACR"}

package/dist/modules/utilities/sensitiveDataKeys.js

@@ -0,0 +1,31 @@
+//#region src/utilities/sensitiveDataKeys.ts
+var e = [
+	"password",
+	"Password",
+	"confirmPassword",
+	"ConfirmPassword",
+	"creditCard",
+	"CreditCard",
+	"authorization",
+	"Authorization",
+	"cookie",
+	"Cookie",
+	"set-cookie",
+	"Set-Cookie",
+	"setCookie",
+	"SetCookie",
+	"token",
+	"Token",
+	"refreshToken",
+	"RefreshToken",
+	"accessToken",
+	"AccessToken",
+	"apiKey",
+	"ApiKey",
+	"secret",
+	"Secret"
+];
+//#endregion
+export { e as SENSITIVE_DATA_KEYS };
+
+//# sourceMappingURL=sensitiveDataKeys.js.map

package/dist/modules/utilities/sensitiveDataKeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitiveDataKeys.js","names":[],"sources":["../../../src/utilities/sensitiveDataKeys.ts"],"sourcesContent":["/**\n * Keys treated as sensitive wherever request/response data is written to a debug\n * log or sent to a telemetry sink (see `ApiService`'s debug output and the\n * `LogService` remote logging pipeline).\n *\n * Passed as the `sensitiveKeys` argument to `parseSensitiveData` (from `@arkyn/shared`)\n * so values are masked with `\"****\"` before they reach any console output or network\n * request.\n *\n * Both `lowerCase` and `Capitalized`/`Header-Case` variants are listed explicitly for\n * header-shaped keys (`Authorization`, `Cookie`, `Set-Cookie`, ...). This is\n * intentionally redundant with `parseSensitiveData`'s own case-insensitive matching:\n * it keeps this list correct regardless of which build of `parseSensitiveData` is\n * resolved at runtime, since a `Headers` instance lowercases names on iteration while\n * plain header objects commonly use `Authorization`/`Header-Case`.\n *\n * Extends the default `parseSensitiveData` key list (`password`, `confirmPassword`,\n * `creditCard`) with header/token-shaped keys that commonly carry credentials.\n */\nconst SENSITIVE_DATA_KEYS = [\n\t\"password\",\n\t\"Password\",\n\t\"confirmPassword\",\n\t\"ConfirmPassword\",\n\t\"creditCard\",\n\t\"CreditCard\",\n\t\"authorization\",\n\t\"Authorization\",\n\t\"cookie\",\n\t\"Cookie\",\n\t\"set-cookie\",\n\t\"Set-Cookie\",\n\t\"setCookie\",\n\t\"SetCookie\",\n\t\"token\",\n\t\"Token\",\n\t\"refreshToken\",\n\t\"RefreshToken\",\n\t\"accessToken\",\n\t\"AccessToken\",\n\t\"apiKey\",\n\t\"ApiKey\",\n\t\"secret\",\n\t\"Secret\",\n] as const;\n\nexport { SENSITIVE_DATA_KEYS };\n"],"mappings":";AAmBA,IAAM,IAAsB;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD"}

package/dist/modules/validations/validateEmail.js

@@ -31,26 +31,31 @@ var s = [
 	"MX",
 	"A",
 	"AAAA"
-];
-async function c(t, n) {
-	try {
-		return await e?.promises?.resolve(t, n), !0;
-	} catch {
-		return !1;
-	}
-}
-async function l(e) {
-	for (let t of s) if (await c(e, t)) return !0;
+], c = 5e3;
+async function l(t, n, r) {
+	return new Promise((i) => {
+		let a = !1, o = setTimeout(() => {
+			a || (a = !0, i(!1));
+		}, r);
+		o.unref?.(), e.promises.resolve(t, n).then(() => {
+			a || (a = !0, clearTimeout(o), i(!0));
+		}).catch(() => {
+			a || (a = !0, clearTimeout(o), i(!1));
+		});
+	});
+}
+async function u(e, t) {
+	for (let n of s) if (await l(e, n, t)) return !0;
 	return !1;
 }
-async function u(e) {
+async function d(e, n) {
 	if (!e || typeof e != "string") return !1;
-	let n = e.trim();
-	if (!t(n) || !a(n)) return !1;
-	let r = o(n);
-	return r ? await l(r) : !1;
+	let r = e.trim();
+	if (!t(r) || !a(r)) return !1;
+	let i = o(r);
+	return i ? await u(i, n?.dnsTimeoutMs ?? c) : !1;
 }
 //#endregion
-export { u as validateEmail };
+export { d as validateEmail };
 
 //# sourceMappingURL=validateEmail.js.map