@deepexi/datasense-connector 3.0.1 → 3.1.0

package/testing/index.d.ts

@@ -1,33 +0,0 @@
-/**
- * `@deepexi/datasense-connector/testing`：在作者自己的机器上运行连接器（vitest 与 CLI 共用）。
- *
- * - `runStream` / `runDiscover` / `runCheck` / `runPush`：在当前进程里执行已导入的定义对象（vitest 用）；
- * - `loadConnectorSource` + `createVmExecutor`：把源码目录转译成 CommonJS 打包串，在空环境变量的子进程里用与平台 runner
- *   相同的 guest 会话执行（CLI 用）；
- * - `inspectDefinition`：只加载连接器并取定义摘要（核对 `package.json` 的名字与版本），不执行作业；
- * - `createLocalGateway`：本地模拟网关，应答 guest 的出站 HTTP、数据库、加密、缓存与凭证调用（主机求交、限流、句柄替换与平台一致）；
- * - 夹具：`createRecorder` 挂在网关的 `onExchange` 上录制、`serializeFixture` / `parseFixtures` / `readFixtureDir` 读写
- *   `fixtures/<用例名>/`，`createReplayHost` / `runFixture` / `runFixtures` 不联网回放并做合规检查；
- * - 纯函数 `inferRecordSchema`、`checkCompliance`（不依赖 Node 模块）。
- *
- * 连接器源码不要导入本入口：平台打包时只认 `@deepexi/datasense-connector` 本身，子路径一律拒绝。
- */
-export type { GuestJob, HostMethod, LocalHost, LocalRunErrorCode, LocalRunResult, GuestExecutor, SourceLoadErrorCode } from './types.js';
-export { LocalRunError, SourceLoadError } from './types.js';
-export type { LocalExchange, LocalGatewayOptions } from './gateway.js';
-export { createLocalGateway } from './gateway.js';
-export type { DefinitionInspection, StreamRunInput, VmExecutorOptions } from './engine.js';
-export { createInProcessExecutor, createVmExecutor, inspectDefinition, runCheck, runDiscover, runPush, runStream } from './engine.js';
-export type { LoadedSource } from './source-loader.js';
-export { loadConnectorSource } from './source-loader.js';
-export { CREDENTIAL_HEADER_NAMES, redactHeaders, redactQuery, redactSecretValues, redactUrl, secretRedactionTexts } from './redaction.js';
-export type { ConnectorFixtureFile, FixtureCase, FixtureExchange, FixtureExpectation, FixtureRequest, LoadedFixture, } from './fixtures.js';
-export { FixtureFormatError, parseFixtures, readFixtureDir, serializeFixture } from './fixtures.js';
-export type { FixtureRecorder } from './recorder.js';
-export { createRecorder } from './recorder.js';
-export type { FixtureCaseResult, FixtureDeclaration, FixtureMismatch, ReplayHost, RunFixtureOptions } from './replay.js';
-export { createReplayHost, FixtureReplayError, runFixture, runFixtures } from './replay.js';
-export type { InferredColumnType } from './schema.js';
-export { inferRecordSchema } from './schema.js';
-export type { ComplianceCode, ComplianceFinding, ComplianceInput } from './compliance.js';
-export { checkCompliance, COMPLIANCE_CODES } from './compliance.js';

package/testing/index.js

@@ -1,10 +0,0 @@
-export { LocalRunError, SourceLoadError } from './types.js';
-export { createLocalGateway } from './gateway.js';
-export { createInProcessExecutor, createVmExecutor, inspectDefinition, runCheck, runDiscover, runPush, runStream } from './engine.js';
-export { loadConnectorSource } from './source-loader.js';
-export { CREDENTIAL_HEADER_NAMES, redactHeaders, redactQuery, redactSecretValues, redactUrl, secretRedactionTexts } from './redaction.js';
-export { FixtureFormatError, parseFixtures, readFixtureDir, serializeFixture } from './fixtures.js';
-export { createRecorder } from './recorder.js';
-export { createReplayHost, FixtureReplayError, runFixture, runFixtures } from './replay.js';
-export { inferRecordSchema } from './schema.js';
-export { checkCompliance, COMPLIANCE_CODES } from './compliance.js';

package/testing/local-db.d.ts

@@ -1,27 +0,0 @@
-import type { DbNextResponse, DbQueryResponse } from '../runtime/protocol.js';
-export interface LocalDbTarget {
-    host: string;
-    port: number;
-    database: string;
-    user: string;
-    password: string;
-    ssl?: boolean;
-}
-/** 带 `code` 的宿主调用失败（与平台数据库代理同码）。 */
-export declare class LocalDbError extends Error {
-    readonly code: string;
-    constructor(code: string, message: string);
-}
-export interface LocalDb {
-    query(request: {
-        sql: string;
-        params: unknown[];
-    }): Promise<DbQueryResponse>;
-    next(cursorId: string): Promise<DbNextResponse>;
-    close(cursorId: string): Promise<void>;
-    end(): Promise<void>;
-}
-export declare function createLocalDb(target: LocalDbTarget, options: {
-    driver?: unknown;
-    secrets: readonly string[];
-}): LocalDb;

package/testing/local-db.js

@@ -1,181 +0,0 @@
-import { randomUUID } from 'node:crypto';
-import { redactSecretValues } from './redaction.js';
-import { LocalRunError } from './types.js';
-const BATCH_ROWS = 1000;
-const STATEMENT_TIMEOUT_MS = 300_000;
-const APPLICATION_NAME = 'datasense-connector-local';
-const RAW_TEXT_OIDS = [1082, 1083, 1114, 1266];
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function factoryOf(driver) {
-    if (typeof driver === 'function')
-        return driver;
-    if (isRecord(driver) && typeof driver.default === 'function')
-        return driver.default;
-    return null;
-}
-async function loadDriver(injected) {
-    if (injected !== undefined && injected !== null) {
-        const factory = factoryOf(injected);
-        if (!factory)
-            throw new LocalRunError('DB_DRIVER_MISSING', 'the injected postgres driver is not the postgres.js module');
-        return factory;
-    }
-    const specifier = 'postgres';
-    let loaded;
-    try {
-        loaded = await import(specifier);
-    }
-    catch {
-        throw new LocalRunError('DB_DRIVER_MISSING', 'ctx.db needs the postgres driver: install it next to the connector (npm install --save-dev postgres)');
-    }
-    const factory = factoryOf(loaded);
-    if (!factory)
-        throw new LocalRunError('DB_DRIVER_MISSING', 'the installed postgres package is not the postgres.js driver');
-    return factory;
-}
-function toParam(value) {
-    if (value === undefined)
-        return null;
-    if (isRecord(value))
-        return JSON.stringify(value);
-    return value;
-}
-function toJsonValue(value) {
-    if (value instanceof Date)
-        return Number.isNaN(value.getTime()) ? null : value.toISOString();
-    if (typeof value === 'bigint')
-        return value.toString();
-    if (value instanceof Uint8Array)
-        return Buffer.from(value).toString('base64');
-    if (Array.isArray(value))
-        return value.map(toJsonValue);
-    return value;
-}
-function toRows(rows) {
-    return rows.map((row) => {
-        const out = {};
-        for (const [name, value] of Object.entries(row))
-            out[name] = toJsonValue(value);
-        return out;
-    });
-}
-export class LocalDbError extends Error {
-    code;
-    constructor(code, message) {
-        super(message);
-        this.name = 'LocalDbError';
-        this.code = code;
-    }
-}
-export function createLocalDb(target, options) {
-    let pool = null;
-    const cursors = new Map();
-    const secrets = [...options.secrets, target.password];
-    const poolOf = async () => {
-        if (pool)
-            return pool;
-        const factory = await loadDriver(options.driver);
-        pool = factory({
-            host: target.host,
-            port: target.port,
-            database: target.database,
-            username: target.user,
-            password: target.password,
-            ssl: target.ssl ? 'require' : false,
-            max: 4,
-            idle_timeout: 60,
-            connect_timeout: 10,
-            prepare: false,
-            onnotice: () => { },
-            connection: { application_name: APPLICATION_NAME },
-            types: {
-                rawText: { to: 25, from: RAW_TEXT_OIDS, serialize: (value) => String(value), parse: (value) => value },
-            },
-        });
-        return pool;
-    };
-    const failed = (error) => {
-        if (error instanceof LocalDbError || error instanceof LocalRunError)
-            return error;
-        const message = redactSecretValues(error instanceof Error ? error.message : String(error), secrets);
-        return new LocalDbError('DB_PROXY_FAILED', `The query to the source database failed: ${message}`);
-    };
-    const finish = async (id, cursor, ok) => {
-        cursors.delete(id);
-        try {
-            if (ok)
-                await cursor.iterator.return?.();
-            await cursor.reserved.unsafe(ok ? 'commit' : 'rollback');
-        }
-        catch {
-            await Promise.resolve(cursor.reserved.unsafe('rollback')).then(undefined, () => undefined);
-        }
-        finally {
-            cursor.reserved.release();
-        }
-    };
-    return {
-        async query(request) {
-            const sql = await poolOf();
-            let reserved = null;
-            try {
-                reserved = await sql.reserve();
-                await reserved.unsafe('begin read only');
-                await reserved.unsafe(`set local statement_timeout = ${STATEMENT_TIMEOUT_MS}`);
-                const iterator = reserved.unsafe(request.sql, request.params.map(toParam)).cursor(BATCH_ROWS)[Symbol.asyncIterator]();
-                const first = await iterator.next();
-                const rows = first.done ? [] : first.value;
-                const fields = (rows.columns ?? []).map((column) => ({ name: column.name, dataTypeId: column.type }));
-                const id = randomUUID();
-                const cursor = { reserved, iterator };
-                reserved = null;
-                if (first.done === true || rows.length < BATCH_ROWS) {
-                    await finish(id, cursor, true);
-                    return { cursorId: null, fields, rows: toRows(rows), done: true };
-                }
-                cursors.set(id, cursor);
-                return { cursorId: id, fields, rows: toRows(rows), done: false };
-            }
-            catch (error) {
-                if (reserved) {
-                    const held = reserved;
-                    await Promise.resolve(held.unsafe('rollback')).then(undefined, () => undefined);
-                    held.release();
-                }
-                throw failed(error);
-            }
-        },
-        async next(cursorId) {
-            const cursor = cursors.get(cursorId);
-            if (!cursor)
-                throw new LocalDbError('DB_CURSOR_NOT_FOUND', "The cursor doesn't exist or was closed");
-            try {
-                const step = await cursor.iterator.next();
-                const rows = step.done ? [] : step.value;
-                const done = step.done === true || rows.length < BATCH_ROWS;
-                if (done)
-                    await finish(cursorId, cursor, true);
-                return { rows: toRows(rows), done };
-            }
-            catch (error) {
-                await finish(cursorId, cursor, false);
-                throw failed(error);
-            }
-        },
-        async close(cursorId) {
-            const cursor = cursors.get(cursorId);
-            if (cursor)
-                await finish(cursorId, cursor, true);
-        },
-        async end() {
-            for (const [id, cursor] of [...cursors])
-                await finish(id, cursor, false);
-            const current = pool;
-            pool = null;
-            if (current)
-                await current.end({ timeout: 5 }).catch(() => undefined);
-        },
-    };
-}

package/testing/pinned-http.d.ts

@@ -1,14 +0,0 @@
-import type { LookupAddress } from 'node:dns';
-export declare class PinnedBodyTooLargeError extends Error {
-    constructor();
-}
-export interface PinnedRequestInput {
-    url: URL;
-    method: string;
-    headers: Record<string, string>;
-    body: Uint8Array | null;
-    addresses: readonly LookupAddress[];
-    signal: AbortSignal;
-    maxBytes: number;
-}
-export declare function pinnedRequest(input: PinnedRequestInput): Promise<Response>;

package/testing/pinned-http.js

@@ -1,125 +0,0 @@
-import { request as httpRequest } from 'node:http';
-import { request as httpsRequest } from 'node:https';
-import { brotliDecompressSync, gunzipSync, inflateRawSync, inflateSync } from 'node:zlib';
-export class PinnedBodyTooLargeError extends Error {
-    constructor() {
-        super('response body too large');
-        this.name = 'PinnedBodyTooLargeError';
-    }
-}
-const NULL_BODY_STATUSES = new Set([101, 103, 204, 205, 304]);
-function pinnedLookup(addresses) {
-    return (_hostname, options, callback) => {
-        const all = typeof options === 'object' && options !== null && options.all === true;
-        const first = addresses[0];
-        if (!first) {
-            callback(Object.assign(new Error('no address to connect to'), { code: 'ENOTFOUND' }), []);
-            return;
-        }
-        if (all)
-            callback(null, [...addresses]);
-        else
-            callback(null, first.address, first.family);
-    };
-}
-function decompress(bytes, encoding, maxBytes) {
-    const options = { maxOutputLength: maxBytes + 1 };
-    try {
-        switch (encoding) {
-            case 'gzip':
-            case 'x-gzip':
-                return gunzipSync(bytes, options);
-            case 'deflate':
-                try {
-                    return inflateSync(bytes, options);
-                }
-                catch (error) {
-                    if (error instanceof RangeError)
-                        throw error;
-                    return inflateRawSync(bytes, options);
-                }
-            case 'br':
-                return brotliDecompressSync(bytes, options);
-            default:
-                return bytes;
-        }
-    }
-    catch (error) {
-        if (error instanceof RangeError || error.code === 'ERR_BUFFER_TOO_LARGE')
-            throw new PinnedBodyTooLargeError();
-        throw error;
-    }
-}
-function toHeaders(response) {
-    const headers = new Headers();
-    const raw = response.rawHeaders;
-    for (let index = 0; index + 1 < raw.length; index += 2) {
-        try {
-            headers.append(raw[index] ?? '', raw[index + 1] ?? '');
-        }
-        catch {
-        }
-    }
-    return headers;
-}
-export function pinnedRequest(input) {
-    const { url, method, signal, maxBytes } = input;
-    const send = url.protocol === 'https:' ? httpsRequest : httpRequest;
-    const body = input.body !== null && method !== 'GET' && method !== 'HEAD' ? Buffer.from(input.body) : null;
-    const headers = { ...input.headers };
-    if (body !== null)
-        headers['content-length'] = String(body.byteLength);
-    return new Promise((resolve, reject) => {
-        if (signal.aborted) {
-            reject(new Error('aborted'));
-            return;
-        }
-        let settled = false;
-        const fail = (error) => {
-            if (settled)
-                return;
-            settled = true;
-            signal.removeEventListener('abort', onAbort);
-            reject(error);
-        };
-        const req = send(url, { method, headers, lookup: pinnedLookup(input.addresses) }, (response) => {
-            const chunks = [];
-            let size = 0;
-            response.on('data', (chunk) => {
-                size += chunk.byteLength;
-                if (size > maxBytes) {
-                    req.destroy();
-                    fail(new PinnedBodyTooLargeError());
-                    return;
-                }
-                chunks.push(chunk);
-            });
-            response.on('error', (error) => fail(error));
-            response.on('end', () => {
-                if (settled)
-                    return;
-                try {
-                    const status = response.statusCode ?? 0;
-                    const encoding = (response.headers['content-encoding'] ?? '').trim().toLowerCase();
-                    const bytes = method === 'HEAD' ? Buffer.alloc(0) : decompress(Buffer.concat(chunks), encoding, maxBytes);
-                    const responseHeaders = toHeaders(response);
-                    const body = NULL_BODY_STATUSES.has(status) || bytes.byteLength === 0 ? null : bytes;
-                    const result = new Response(body, { status, headers: responseHeaders });
-                    settled = true;
-                    signal.removeEventListener('abort', onAbort);
-                    resolve(result);
-                }
-                catch (error) {
-                    fail(error instanceof Error ? error : new Error(String(error)));
-                }
-            });
-        });
-        const onAbort = () => {
-            req.destroy(new Error('aborted'));
-            fail(new Error('aborted'));
-        };
-        signal.addEventListener('abort', onAbort, { once: true });
-        req.on('error', (error) => fail(error));
-        req.end(body ?? undefined);
-    });
-}

package/testing/recorder.d.ts

@@ -1,15 +0,0 @@
-import { type FixtureExchange } from './fixtures.js';
-import type { LocalExchange } from './gateway.js';
-export interface FixtureRecorder {
-    onExchange(exchange: LocalExchange): void;
-    /** 至今录下的往来（按 `seq` 升序，深拷贝）。 */
-    exchanges(): FixtureExchange[];
-}
-/**
- * `secrets`：配置里的 Secret 字段 → 明文；`extraSecrets`：其余要遮蔽的明文（如本地 `db` 的密码）。
- * 遮蔽时每个明文连同它的 URL 编码与表单编码写法一起替换。
- */
-export declare function createRecorder(options: {
-    secrets: Record<string, string>;
-    extraSecrets?: readonly string[];
-}): FixtureRecorder;

package/testing/recorder.js

@@ -1,116 +0,0 @@
-import { canonicalRequestUrl } from './fixtures.js';
-import { redactHeaders, redactSecretValues, redactUrl, secretRedactionTexts } from './redaction.js';
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function redactDeep(value, secrets) {
-    const plain = value === undefined ? null : JSON.parse(JSON.stringify(value));
-    const walk = (item) => {
-        if (typeof item === 'string')
-            return redactSecretValues(item, secrets);
-        if (Array.isArray(item))
-            return item.map(walk);
-        if (isRecord(item))
-            return Object.fromEntries(Object.entries(item).map(([key, child]) => [key, walk(child)]));
-        return item;
-    };
-    return walk(plain);
-}
-export function createRecorder(options) {
-    const secrets = secretRedactionTexts([...Object.values(options.secrets), ...(options.extraSecrets ?? [])]
-        .filter((value) => typeof value === 'string'));
-    const redact = (text) => redactSecretValues(text, secrets);
-    const recorded = [];
-    const openCursors = new Map();
-    let seq = 0;
-    const errorOf = (exchange) => exchange.error ? { code: exchange.error.code, message: redact(exchange.error.message) } : null;
-    const recordHttp = (exchange) => {
-        const request = exchange.request;
-        if (!isRecord(request) || typeof request.url !== 'string' || typeof request.method !== 'string')
-            return;
-        const bodyEncoding = request.bodyEncoding === 'base64' ? 'base64' : 'utf8';
-        const body = typeof request.body === 'string' ? (bodyEncoding === 'utf8' ? redact(request.body) : request.body) : null;
-        const response = exchange.response;
-        seq += 1;
-        recorded.push({
-            seq,
-            kind: 'http',
-            request: {
-                method: request.method,
-                url: redactUrl(canonicalRequestUrl(request.url, request.query), secrets),
-                headers: redactHeaders(isRecord(request.headers) ? request.headers : {}, secrets),
-                body,
-                bodyEncoding,
-            },
-            response: exchange.error || !isRecord(response)
-                ? null
-                : {
-                    status: response.status,
-                    headers: redactHeaders(response.headers ?? {}, secrets),
-                    body: response.bodyEncoding === 'utf8' ? redact(response.body) : response.body,
-                    bodyEncoding: response.bodyEncoding,
-                },
-            error: errorOf(exchange) ?? (isRecord(response) ? null : { code: 'HOST_CALL_FAILED', message: 'no response was recorded' }),
-        });
-    };
-    const recordDb = (exchange) => {
-        const request = exchange.request;
-        if (!isRecord(request))
-            return;
-        if (typeof request.sql === 'string') {
-            const response = exchange.response;
-            seq += 1;
-            const entry = {
-                seq,
-                kind: 'db',
-                sql: redact(request.sql),
-                params: redactDeep(Array.isArray(request.params) ? request.params : [], secrets),
-                fields: isRecord(response) && Array.isArray(response.fields) ? response.fields.map((field) => ({ name: field.name, dataTypeId: field.dataTypeId })) : [],
-                rows: isRecord(response) && Array.isArray(response.rows) ? redactDeep(response.rows, secrets) : [],
-                error: errorOf(exchange),
-            };
-            recorded.push(entry);
-            if (isRecord(response) && typeof response.cursorId === 'string' && response.done === false)
-                openCursors.set(response.cursorId, entry);
-            return;
-        }
-        if (typeof request.cursorId === 'string') {
-            const entry = openCursors.get(request.cursorId);
-            if (!entry)
-                return;
-            const response = exchange.response;
-            if (isRecord(response) && Array.isArray(response.rows))
-                entry.rows.push(...redactDeep(response.rows, secrets));
-            const error = errorOf(exchange);
-            if (error)
-                entry.error = error;
-            if (error || !isRecord(response) || response.done !== false)
-                openCursors.delete(request.cursorId);
-        }
-    };
-    const recordCrypto = (exchange) => {
-        if (exchange.error || !isRecord(exchange.request) || !isRecord(exchange.response) || typeof exchange.response.value !== 'string')
-            return;
-        const request = redactDeep(exchange.request, secrets);
-        seq += 1;
-        recorded.push({ seq, kind: 'crypto', request, value: redact(exchange.response.value) });
-    };
-    return {
-        onExchange(exchange) {
-            switch (exchange.kind) {
-                case 'http':
-                    recordHttp(exchange);
-                    return;
-                case 'db':
-                    recordDb(exchange);
-                    return;
-                case 'crypto':
-                    recordCrypto(exchange);
-                    return;
-            }
-        },
-        exchanges() {
-            return JSON.parse(JSON.stringify(recorded));
-        },
-    };
-}

package/testing/redaction.d.ts

@@ -1,28 +0,0 @@
-/**
- * 遮蔽规则（录制夹具、本地 `read` 的请求行、本地运行日志共用），与 shared `utils/connector-redaction.ts` 同一套规则；
- * SDK 不依赖 shared，这里另写一份，`test/testing/redaction.test.ts` 对照两份实现的结果。
- *
- * - 长度 ≥ 4 的 Secret 明文 → `***`（长的先替换，避免短值截断长值）；
- * - `CREDENTIAL_HEADER_NAMES` 里的请求 / 响应头（小写比较）整值 → `***`；
- * - 含句柄 `ontos:secret:` 的 query 值 → `***`；请求里的句柄本身原样保留（网关替换前的形态）。
- */
-/** 凭证类请求 / 响应头（小写）；与 shared 的 `CREDENTIAL_HEADER_NAMES` 同值。 */
-export declare const CREDENTIAL_HEADER_NAMES: readonly string[];
-/** 遮蔽的最短明文长度：更短的值误伤面太大，不替换。 */
-export declare const REDACT_MIN_LENGTH = 4;
-export declare const REDACTED = "***";
-/** 文本里是否含凭证句柄（原文或 URL 编码写法）。 */
-export declare function containsSecretHandle(text: string): boolean;
-/** 把文本里长度 ≥ 4 的 Secret 明文替换为 `***`（先替换较长的）。 */
-export declare function redactSecretValues(text: string, secrets: readonly string[]): string;
-/**
- * 遮蔽用的明文清单：每个 Secret 加上它进 URL 后的两种写法——`encodeURIComponent` 与表单编码（`URLSearchParams`，空格写成 `+`）。
- * 句柄替换进 URL 时用的是编码写法，响应的 `url`、日志与录制里出现的也是它，只遮明文会漏掉。
- */
-export declare function secretRedactionTexts(secrets: readonly string[]): string[];
-/** 凭证类头（名字按小写比较）的值换成 `***`，其余头的值做 `redactSecretValues`；头名保持原样。 */
-export declare function redactHeaders(headers: Record<string, string>, secrets: readonly string[]): Record<string, string>;
-/** query 参数：值含句柄的换成 `***`，其余值做 `redactSecretValues`。 */
-export declare function redactQuery(query: Record<string, string | string[]>, secrets: readonly string[]): Record<string, string | string[]>;
-/** URL：值含句柄的 query 参数换成 `***`，再遮蔽明文；解析不了时只做明文遮蔽。与 connector 的 `traceUrl` 相同。 */
-export declare function redactUrl(url: string, secrets: readonly string[]): string;

package/testing/redaction.js

@@ -1,67 +0,0 @@
-export const CREDENTIAL_HEADER_NAMES = Object.freeze([
-    'authorization',
-    'proxy-authorization',
-    'cookie',
-    'set-cookie',
-    'x-api-key',
-    'x-auth-token',
-]);
-export const REDACT_MIN_LENGTH = 4;
-export const REDACTED = '***';
-const CREDENTIAL_HEADER_SET = new Set(CREDENTIAL_HEADER_NAMES);
-const HANDLE_PATTERN = /ontos(?::|%3[Aa])secret(?::|%3[Aa])/;
-export function containsSecretHandle(text) {
-    return HANDLE_PATTERN.test(text);
-}
-export function redactSecretValues(text, secrets) {
-    const candidates = [...new Set(secrets.filter((secret) => typeof secret === 'string' && secret.length >= REDACT_MIN_LENGTH))]
-        .sort((a, b) => b.length - a.length);
-    let result = text;
-    for (const secret of candidates) {
-        if (result.includes(secret))
-            result = result.split(secret).join(REDACTED);
-    }
-    return result;
-}
-export function secretRedactionTexts(secrets) {
-    const result = new Set();
-    for (const secret of secrets) {
-        if (typeof secret !== 'string')
-            continue;
-        result.add(secret);
-        result.add(encodeURIComponent(secret));
-        result.add(new URLSearchParams([['', secret]]).toString().slice(1));
-    }
-    return [...result];
-}
-export function redactHeaders(headers, secrets) {
-    const result = {};
-    for (const [name, value] of Object.entries(headers)) {
-        result[name] = CREDENTIAL_HEADER_SET.has(name.toLowerCase()) ? REDACTED : redactSecretValues(String(value), secrets);
-    }
-    return result;
-}
-export function redactQuery(query, secrets) {
-    const one = (value) => (containsSecretHandle(value) ? REDACTED : redactSecretValues(value, secrets));
-    const result = {};
-    for (const [name, value] of Object.entries(query))
-        result[name] = Array.isArray(value) ? value.map(one) : one(value);
-    return result;
-}
-export function redactUrl(url, secrets) {
-    let text = url;
-    try {
-        const parsed = new URL(url);
-        const entries = [...parsed.searchParams.entries()];
-        if (entries.some(([, value]) => containsSecretHandle(value))) {
-            const masked = new URLSearchParams();
-            for (const [name, value] of entries)
-                masked.append(name, containsSecretHandle(value) ? REDACTED : value);
-            parsed.search = masked.toString();
-            text = parsed.toString();
-        }
-    }
-    catch {
-    }
-    return redactSecretValues(text, secrets);
-}

package/testing/replay.d.ts

@@ -1,50 +0,0 @@
-import type { DefinitionSummary, NormalizedDiscoverResult } from '../validate.js';
-import { type ComplianceFinding } from './compliance.js';
-import { type ConnectorFixtureFile, type FixtureExchange, type LoadedFixture } from './fixtures.js';
-import type { GuestExecutor, LocalHost } from './types.js';
-/** 回放宿主自己的宿主调用失败（`code` 回给 guest）。 */
-export declare class FixtureReplayError extends Error {
-    readonly code: string;
-    constructor(code: string, message: string);
-}
-export interface FixtureMismatch {
-    method: string;
-    detail: string;
-}
-export type ReplayHost = LocalHost & {
-    unused(): FixtureExchange[];
-    mismatches(): FixtureMismatch[];
-};
-/** 与 shared 的 `ConnectorDeclaration` 同形。 */
-export interface FixtureDeclaration {
-    definition: DefinitionSummary;
-    streams: NormalizedDiscoverResult['streams'];
-    pushes: NormalizedDiscoverResult['pushes'];
-}
-/** 一个夹具用例的回放结果（与 shared 的 `FixtureCaseResult` 同形）。 */
-export interface FixtureCaseResult {
-    name: string;
-    ok: boolean;
-    findings: ComplianceFinding[];
-    stats: {
-        records: Record<string, number>;
-        removals: Record<string, number>;
-        checkpoints: number;
-        rejected: number;
-    };
-    declaration: FixtureDeclaration | null;
-    error: {
-        code: string;
-        message: string;
-        stack: string | null;
-    } | null;
-}
-export interface RunFixtureOptions {
-    /** 每次执行（不是整个用例）的超时，交给 `executor.run`。 */
-    timeoutMs?: number;
-}
-export declare function createReplayHost(fixture: LoadedFixture): ReplayHost;
-/** 回放一个用例（见文件头）。 */
-export declare function runFixture(executor: GuestExecutor, fixture: LoadedFixture, options?: RunFixtureOptions): Promise<FixtureCaseResult>;
-/** 解析夹具文件（格式错误抛 `FixtureFormatError`）后逐个回放，按用例名排序。 */
-export declare function runFixtures(executor: GuestExecutor, files: ConnectorFixtureFile[], options?: RunFixtureOptions): Promise<FixtureCaseResult[]>;