@gpt-core/admin 0.10.13 → 0.10.20

package/dist/index.js

@@ -869,14 +869,35 @@ var client = createClient(
 
 // src/base-client.ts
 var DEFAULT_API_VERSION = "2025-12-03";
+function isSecureUrl(url) {
+  try {
+    const parsed = new URL(url);
+    if (parsed.protocol === "https:") return true;
+    if (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1") return true;
+    return false;
+  } catch {
+    return false;
+  }
+}
 var BaseClient = class {
   constructor(config = {}) {
     this.config = config;
     this.apiVersion = config.apiVersion ?? DEFAULT_API_VERSION;
+    if (config.baseUrl && !isSecureUrl(config.baseUrl)) {
+      console.warn(
+        "[GPT Core SDK] Warning: Using non-HTTPS URL. Credentials may be transmitted insecurely. Use HTTPS in production environments."
+      );
+    }
     if (config.baseUrl) {
       client.setConfig({ baseUrl: config.baseUrl });
     }
     client.interceptors.request.use((req) => {
+      const requestUrl = req.url || config.baseUrl || "";
+      if ((config.apiKey || config.token) && !isSecureUrl(requestUrl)) {
+        console.warn(
+          "[GPT Core SDK] Warning: Sending credentials over non-HTTPS connection."
+        );
+      }
       req.headers.set("Accept", `application/vnd.api+json; version=${this.apiVersion}`);
       req.headers.set("Content-Type", "application/vnd.api+json");
       if (config.apiKey) {
@@ -1539,10 +1560,27 @@ function handleApiError(error) {
   } else if (error?.message) {
     message = error.message;
   }
+  const sensitiveHeaderPatterns = [
+    "set-cookie",
+    "authorization",
+    "x-application-key",
+    "cookie",
+    "x-forwarded-for",
+    "x-real-ip"
+  ];
+  const filterSensitiveHeaders = (hdrs) => {
+    if (!hdrs) return void 0;
+    const entries = hdrs instanceof Headers ? Array.from(hdrs.entries()) : Object.entries(hdrs);
+    const filtered = entries.filter(([key]) => {
+      const lowerKey = key.toLowerCase();
+      return !sensitiveHeaderPatterns.some((pattern) => lowerKey.includes(pattern));
+    });
+    return filtered.length > 0 ? Object.fromEntries(filtered) : void 0;
+  };
   const errorOptions = {
     statusCode,
     requestId,
-    headers: headers ? headers.entries ? Object.fromEntries(headers.entries()) : Object.fromEntries(Object.entries(headers)) : void 0,
+    headers: filterSensitiveHeaders(headers),
     body,
     cause: error
   };

package/dist/index.mjs

@@ -820,14 +820,35 @@ var client = createClient(
 
 // src/base-client.ts
 var DEFAULT_API_VERSION = "2025-12-03";
+function isSecureUrl(url) {
+  try {
+    const parsed = new URL(url);
+    if (parsed.protocol === "https:") return true;
+    if (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1") return true;
+    return false;
+  } catch {
+    return false;
+  }
+}
 var BaseClient = class {
   constructor(config = {}) {
     this.config = config;
     this.apiVersion = config.apiVersion ?? DEFAULT_API_VERSION;
+    if (config.baseUrl && !isSecureUrl(config.baseUrl)) {
+      console.warn(
+        "[GPT Core SDK] Warning: Using non-HTTPS URL. Credentials may be transmitted insecurely. Use HTTPS in production environments."
+      );
+    }
     if (config.baseUrl) {
       client.setConfig({ baseUrl: config.baseUrl });
     }
     client.interceptors.request.use((req) => {
+      const requestUrl = req.url || config.baseUrl || "";
+      if ((config.apiKey || config.token) && !isSecureUrl(requestUrl)) {
+        console.warn(
+          "[GPT Core SDK] Warning: Sending credentials over non-HTTPS connection."
+        );
+      }
       req.headers.set("Accept", `application/vnd.api+json; version=${this.apiVersion}`);
       req.headers.set("Content-Type", "application/vnd.api+json");
       if (config.apiKey) {
@@ -1490,10 +1511,27 @@ function handleApiError(error) {
   } else if (error?.message) {
     message = error.message;
   }
+  const sensitiveHeaderPatterns = [
+    "set-cookie",
+    "authorization",
+    "x-application-key",
+    "cookie",
+    "x-forwarded-for",
+    "x-real-ip"
+  ];
+  const filterSensitiveHeaders = (hdrs) => {
+    if (!hdrs) return void 0;
+    const entries = hdrs instanceof Headers ? Array.from(hdrs.entries()) : Object.entries(hdrs);
+    const filtered = entries.filter(([key]) => {
+      const lowerKey = key.toLowerCase();
+      return !sensitiveHeaderPatterns.some((pattern) => lowerKey.includes(pattern));
+    });
+    return filtered.length > 0 ? Object.fromEntries(filtered) : void 0;
+  };
   const errorOptions = {
     statusCode,
     requestId,
-    headers: headers ? headers.entries ? Object.fromEntries(headers.entries()) : Object.fromEntries(Object.entries(headers)) : void 0,
+    headers: filterSensitiveHeaders(headers),
     body,
     cause: error
   };

package/llms.txt

@@ -304,6 +304,7 @@ client.setConfig({
 - `getExtractionResults()` - List results
 - `getExtractionResultsById()` - Get results
 - `getExtractionResultsDocumentByDocumentId()` - Get document
+- `getExtractionResultsDocumentByDocumentIdHistory()` - Get history
 - `getExtractionResultsWorkspaceByWorkspaceId()` - Get workspace
 - `patchExtractionResultsById()` - Update results
 - `patchExtractionResultsByIdRegenerate()` - Update regenerate

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gpt-core/admin",
-  "version": "0.10.13",
+  "version": "0.10.20",
   "description": "TypeScript SDK for GPT Core Admin API - Platform administration and ISV management",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -51,15 +51,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "generate": "openapi-ts",
-    "typecheck": "tsc --noEmit",
-    "build": "npm run typecheck && tsup src/index.ts --format cjs,esm --dts",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "test:ui": "vitest --ui",
-    "test:coverage": "vitest run --coverage"
-  },
   "dependencies": {
     "zod": "^3.25.76"
   },
@@ -71,5 +62,14 @@
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
     "vitest": "^4.0.15"
+  },
+  "scripts": {
+    "generate": "bunx openapi-ts",
+    "typecheck": "bunx tsc --noEmit",
+    "build": "bun run typecheck && bunx tsup src/index.ts --format cjs,esm --dts",
+    "test": "bunx vitest run",
+    "test:watch": "bunx vitest",
+    "test:ui": "bunx vitest --ui",
+    "test:coverage": "bunx vitest run --coverage"
   }
-}
+}