@camstack/types 0.1.38 → 0.1.39

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const index = require("./index-BblD92Si.js");
+const index = require("./index-CMM1Y9W6.js");
 const zod = require("zod");
 class DisposerChain {
   disposers = [];
@@ -5689,13 +5689,42 @@ function getCapsByProviderKind(kind) {
   }
   return out;
 }
+const CREDENTIAL_PARAM_PATTERNS = [
+  /^user$/i,
+  /^usr$/i,
+  /^username$/i,
+  /^password$/i,
+  /^pwd$/i,
+  /^pass$/i,
+  /^passwd$/i,
+  /^secret$/i,
+  /^token$/i,
+  /^auth$/i,
+  /^auth[_-]?token$/i,
+  /^bearer$/i,
+  /^api[_-]?key$/i,
+  /^access[_-]?token$/i,
+  /^refresh[_-]?token$/i
+];
+function isCredentialParam(name) {
+  return CREDENTIAL_PARAM_PATTERNS.some((re) => re.test(name));
+}
 function maskUrlCredentials(rawUrl) {
   try {
     const u = new URL(rawUrl);
-    if (!u.username && !u.password) return rawUrl;
-    u.username = "";
-    u.password = "";
-    return u.toString();
+    let touched = false;
+    if (u.username || u.password) {
+      u.username = "";
+      u.password = "";
+      touched = true;
+    }
+    for (const key of [...u.searchParams.keys()]) {
+      if (isCredentialParam(key)) {
+        u.searchParams.set(key, "***");
+        touched = true;
+      }
+    }
+    return touched ? u.toString() : rawUrl;
   } catch {
     return rawUrl;
   }