@dx-do/util 6.3.4 → 6.4.0

package/dist/src/index.d.ts

@@ -12,5 +12,6 @@ export * from "./lib/map/non-overwriting-map";
 export * from "./lib/map/set-map";
 export * from "./lib/map/strict-map";
 export * from "./lib/map/stringify-map-support";
+export * from "./lib/security/redact";
 export * from "./lib/stream/filter-empty.transform";
 //# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,mCAAmC,CAAC;AAClD,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,mCAAmC,CAAC;AAClD,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,uBAAuB,CAAC;AACtC,cAAc,qCAAqC,CAAC"}

package/dist/src/lib/security/redact.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Redaction helpers for keeping auth tokens and other secrets out of logs.
+ *
+ * Auth tokens live in axios `error.config.headers` — e.g. `Authorization: Bearer
+ * <userToken>` and `X-Asm-Auth: <dxASMToken>`. Anything that serializes a whole
+ * error / config / headers object (`JSON.stringify`, an AxiosError's `.toJSON()`,
+ * `console.log(err)`, or a logger that deep-prints its argument) will spill them.
+ * These helpers strip the secrets before anything is logged or re-thrown.
+ */
+/**
+ * Returns a deep copy of `value` with sensitive object keys masked and any
+ * `Bearer <token>` substrings scrubbed. Safe to pass anything: it is
+ * circular-reference safe (axios errors are circular), and `Error` instances are
+ * reduced to `{ name, message, stack }` (all scrubbed) so their token-bearing
+ * `config`/`request`/`response` are dropped entirely.
+ */
+export declare function redactValue(value: unknown, seen?: WeakSet<object>): unknown;
+/**
+ * Strips auth tokens from an (possibly Axios) error IN PLACE and returns it, so it
+ * stays a throwable `Error` with its stack intact but no longer carries the token
+ * in `config.headers`, `response.config.headers`, or the raw request header string.
+ * Non-error / non-axios values are returned unchanged.
+ *
+ * Use this at the axios boundary (a response error interceptor) so every catch,
+ * re-throw, and top-level handler downstream sees a token-free error.
+ */
+export declare function sanitizeAxiosError(err: unknown): unknown;
+//# sourceMappingURL=redact.d.ts.map

package/dist/src/lib/security/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../../src/lib/security/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6BH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,kBAAwB,GAAG,OAAO,CAyBjF;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAoBxD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dx-do/util",
-  "version": "6.3.4",
+  "version": "6.4.0",
   "description": "Utility classes for dx-do and related projects",
   "author": "Ki Alam",
   "logo": {