@naturalpay/sdk 1.6.3 → 1.6.5

package/dist/esm/api/types/index.d.mts

@@ -2,6 +2,7 @@ export * from "./BadGatewayErrorBody.mjs";
 export * from "./BadGatewayErrorBodyErrorsItem.mjs";
 export * from "./BadGatewayErrorBodyErrorsItemMeta.mjs";
 export * from "./BadGatewayErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./BadGatewayErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./BadGatewayErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./BadGatewayErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./BadGatewayErrorBodyErrorsItemSource.mjs";
@@ -9,6 +10,7 @@ export * from "./BadRequestErrorBody.mjs";
 export * from "./BadRequestErrorBodyErrorsItem.mjs";
 export * from "./BadRequestErrorBodyErrorsItemMeta.mjs";
 export * from "./BadRequestErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./BadRequestErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./BadRequestErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./BadRequestErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./BadRequestErrorBodyErrorsItemSource.mjs";
@@ -22,6 +24,7 @@ export * from "./ConflictErrorBody.mjs";
 export * from "./ConflictErrorBodyErrorsItem.mjs";
 export * from "./ConflictErrorBodyErrorsItemMeta.mjs";
 export * from "./ConflictErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./ConflictErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./ConflictErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./ConflictErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./ConflictErrorBodyErrorsItemSource.mjs";
@@ -29,6 +32,7 @@ export * from "./ForbiddenErrorBody.mjs";
 export * from "./ForbiddenErrorBodyErrorsItem.mjs";
 export * from "./ForbiddenErrorBodyErrorsItemMeta.mjs";
 export * from "./ForbiddenErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./ForbiddenErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./ForbiddenErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./ForbiddenErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./ForbiddenErrorBodyErrorsItemSource.mjs";
@@ -36,6 +40,7 @@ export * from "./InternalServerErrorBody.mjs";
 export * from "./InternalServerErrorBodyErrorsItem.mjs";
 export * from "./InternalServerErrorBodyErrorsItemMeta.mjs";
 export * from "./InternalServerErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./InternalServerErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./InternalServerErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./InternalServerErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./InternalServerErrorBodyErrorsItemSource.mjs";
@@ -45,6 +50,7 @@ export * from "./NotFoundErrorBody.mjs";
 export * from "./NotFoundErrorBodyErrorsItem.mjs";
 export * from "./NotFoundErrorBodyErrorsItemMeta.mjs";
 export * from "./NotFoundErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./NotFoundErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./NotFoundErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./NotFoundErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./NotFoundErrorBodyErrorsItemSource.mjs";
@@ -52,6 +58,7 @@ export * from "./NotImplementedErrorBody.mjs";
 export * from "./NotImplementedErrorBodyErrorsItem.mjs";
 export * from "./NotImplementedErrorBodyErrorsItemMeta.mjs";
 export * from "./NotImplementedErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./NotImplementedErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./NotImplementedErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./NotImplementedErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./NotImplementedErrorBodyErrorsItemSource.mjs";
@@ -65,6 +72,7 @@ export * from "./PreconditionErrorBody.mjs";
 export * from "./PreconditionErrorBodyErrorsItem.mjs";
 export * from "./PreconditionErrorBodyErrorsItemMeta.mjs";
 export * from "./PreconditionErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./PreconditionErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./PreconditionErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./PreconditionErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./PreconditionErrorBodyErrorsItemSource.mjs";
@@ -78,6 +86,7 @@ export * from "./ServiceUnavailableErrorBody.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItem.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItemMeta.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./ServiceUnavailableErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItemSource.mjs";
@@ -85,6 +94,7 @@ export * from "./TooManyRequestsErrorBody.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItem.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItemMeta.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./TooManyRequestsErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItemSource.mjs";
@@ -93,6 +103,7 @@ export * from "./UnauthorizedErrorBody.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItem.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItemMeta.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./UnauthorizedErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItemSource.mjs";
@@ -100,6 +111,7 @@ export * from "./UnprocessableEntityErrorBody.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItem.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItemMeta.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./UnprocessableEntityErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItemSource.mjs";

package/dist/esm/api/types/index.mjs

@@ -2,6 +2,7 @@ export * from "./BadGatewayErrorBody.mjs";
 export * from "./BadGatewayErrorBodyErrorsItem.mjs";
 export * from "./BadGatewayErrorBodyErrorsItemMeta.mjs";
 export * from "./BadGatewayErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./BadGatewayErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./BadGatewayErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./BadGatewayErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./BadGatewayErrorBodyErrorsItemSource.mjs";
@@ -9,6 +10,7 @@ export * from "./BadRequestErrorBody.mjs";
 export * from "./BadRequestErrorBodyErrorsItem.mjs";
 export * from "./BadRequestErrorBodyErrorsItemMeta.mjs";
 export * from "./BadRequestErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./BadRequestErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./BadRequestErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./BadRequestErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./BadRequestErrorBodyErrorsItemSource.mjs";
@@ -22,6 +24,7 @@ export * from "./ConflictErrorBody.mjs";
 export * from "./ConflictErrorBodyErrorsItem.mjs";
 export * from "./ConflictErrorBodyErrorsItemMeta.mjs";
 export * from "./ConflictErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./ConflictErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./ConflictErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./ConflictErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./ConflictErrorBodyErrorsItemSource.mjs";
@@ -29,6 +32,7 @@ export * from "./ForbiddenErrorBody.mjs";
 export * from "./ForbiddenErrorBodyErrorsItem.mjs";
 export * from "./ForbiddenErrorBodyErrorsItemMeta.mjs";
 export * from "./ForbiddenErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./ForbiddenErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./ForbiddenErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./ForbiddenErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./ForbiddenErrorBodyErrorsItemSource.mjs";
@@ -36,6 +40,7 @@ export * from "./InternalServerErrorBody.mjs";
 export * from "./InternalServerErrorBodyErrorsItem.mjs";
 export * from "./InternalServerErrorBodyErrorsItemMeta.mjs";
 export * from "./InternalServerErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./InternalServerErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./InternalServerErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./InternalServerErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./InternalServerErrorBodyErrorsItemSource.mjs";
@@ -45,6 +50,7 @@ export * from "./NotFoundErrorBody.mjs";
 export * from "./NotFoundErrorBodyErrorsItem.mjs";
 export * from "./NotFoundErrorBodyErrorsItemMeta.mjs";
 export * from "./NotFoundErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./NotFoundErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./NotFoundErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./NotFoundErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./NotFoundErrorBodyErrorsItemSource.mjs";
@@ -52,6 +58,7 @@ export * from "./NotImplementedErrorBody.mjs";
 export * from "./NotImplementedErrorBodyErrorsItem.mjs";
 export * from "./NotImplementedErrorBodyErrorsItemMeta.mjs";
 export * from "./NotImplementedErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./NotImplementedErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./NotImplementedErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./NotImplementedErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./NotImplementedErrorBodyErrorsItemSource.mjs";
@@ -65,6 +72,7 @@ export * from "./PreconditionErrorBody.mjs";
 export * from "./PreconditionErrorBodyErrorsItem.mjs";
 export * from "./PreconditionErrorBodyErrorsItemMeta.mjs";
 export * from "./PreconditionErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./PreconditionErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./PreconditionErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./PreconditionErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./PreconditionErrorBodyErrorsItemSource.mjs";
@@ -78,6 +86,7 @@ export * from "./ServiceUnavailableErrorBody.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItem.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItemMeta.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./ServiceUnavailableErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./ServiceUnavailableErrorBodyErrorsItemSource.mjs";
@@ -85,6 +94,7 @@ export * from "./TooManyRequestsErrorBody.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItem.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItemMeta.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./TooManyRequestsErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./TooManyRequestsErrorBodyErrorsItemSource.mjs";
@@ -93,6 +103,7 @@ export * from "./UnauthorizedErrorBody.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItem.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItemMeta.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./UnauthorizedErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./UnauthorizedErrorBodyErrorsItemSource.mjs";
@@ -100,6 +111,7 @@ export * from "./UnprocessableEntityErrorBody.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItem.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItemMeta.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItemMetaConnectionStatus.mjs";
+export * from "./UnprocessableEntityErrorBodyErrorsItemMetaLimitScope.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItemMetaProvider.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItemMetaProviderName.mjs";
 export * from "./UnprocessableEntityErrorBodyErrorsItemSource.mjs";

package/dist/esm/core/fetcher/Fetcher.mjs

@@ -18,6 +18,7 @@ import { getResponseBody } from "./getResponseBody.mjs";
 import { Headers } from "./Headers.mjs";
 import { makeRequest } from "./makeRequest.mjs";
 import { abortRawResponse, toRawResponse, unknownRawResponse } from "./RawResponse.mjs";
+import { redactUrl, SENSITIVE_QUERY_PARAMS } from "./redactUrl.mjs";
 import { requestWithRetries } from "./requestWithRetries.mjs";
 const SENSITIVE_HEADERS = new Set([
     "authorization",
@@ -49,26 +50,6 @@ function redactHeaders(headers) {
     }
     return filtered;
 }
-const SENSITIVE_QUERY_PARAMS = new Set([
-    "api_key",
-    "api-key",
-    "apikey",
-    "token",
-    "access_token",
-    "access-token",
-    "auth_token",
-    "auth-token",
-    "password",
-    "passwd",
-    "secret",
-    "api_secret",
-    "api-secret",
-    "apisecret",
-    "key",
-    "session",
-    "session_id",
-    "session-id",
-]);
 function redactQueryParameters(queryParameters) {
     if (queryParameters == null) {
         return undefined;
@@ -79,70 +60,6 @@ function redactQueryParameters(queryParameters) {
     }
     return redacted;
 }
-function redactUrl(url) {
-    const protocolIndex = url.indexOf("://");
-    if (protocolIndex === -1)
-        return url;
-    const afterProtocol = protocolIndex + 3;
-    // Find the first delimiter that marks the end of the authority section
-    const pathStart = url.indexOf("/", afterProtocol);
-    let queryStart = url.indexOf("?", afterProtocol);
-    let fragmentStart = url.indexOf("#", afterProtocol);
-    const firstDelimiter = Math.min(pathStart === -1 ? url.length : pathStart, queryStart === -1 ? url.length : queryStart, fragmentStart === -1 ? url.length : fragmentStart);
-    // Find the LAST @ before the delimiter (handles multiple @ in credentials)
-    let atIndex = -1;
-    for (let i = afterProtocol; i < firstDelimiter; i++) {
-        if (url[i] === "@") {
-            atIndex = i;
-        }
-    }
-    if (atIndex !== -1) {
-        url = `${url.slice(0, afterProtocol)}[REDACTED]@${url.slice(atIndex + 1)}`;
-    }
-    // Recalculate queryStart since url might have changed
-    queryStart = url.indexOf("?");
-    if (queryStart === -1)
-        return url;
-    fragmentStart = url.indexOf("#", queryStart);
-    const queryEnd = fragmentStart !== -1 ? fragmentStart : url.length;
-    const queryString = url.slice(queryStart + 1, queryEnd);
-    if (queryString.length === 0)
-        return url;
-    // FAST PATH: Quick check if any sensitive keywords present
-    // Using indexOf is faster than regex for simple substring matching
-    const lower = queryString.toLowerCase();
-    const hasSensitive = lower.includes("token") ||
-        lower.includes("key") ||
-        lower.includes("password") ||
-        lower.includes("passwd") ||
-        lower.includes("secret") ||
-        lower.includes("session") ||
-        lower.includes("auth");
-    if (!hasSensitive) {
-        return url;
-    }
-    // SLOW PATH: Parse and redact
-    const redactedParams = [];
-    const params = queryString.split("&");
-    for (const param of params) {
-        const equalIndex = param.indexOf("=");
-        if (equalIndex === -1) {
-            redactedParams.push(param);
-            continue;
-        }
-        const key = param.slice(0, equalIndex);
-        let shouldRedact = SENSITIVE_QUERY_PARAMS.has(key.toLowerCase());
-        if (!shouldRedact && key.includes("%")) {
-            try {
-                const decodedKey = decodeURIComponent(key);
-                shouldRedact = SENSITIVE_QUERY_PARAMS.has(decodedKey.toLowerCase());
-            }
-            catch (_a) { }
-        }
-        redactedParams.push(shouldRedact ? `${key}=[REDACTED]` : param);
-    }
-    return url.slice(0, queryStart + 1) + redactedParams.join("&") + url.slice(queryEnd);
-}
 function getHeaders(args) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a;

package/dist/esm/core/fetcher/makePassthroughRequest.mjs

@@ -12,6 +12,7 @@ import { join } from "../url/join.mjs";
 import { EndpointSupplier } from "./EndpointSupplier.mjs";
 import { getFetchFn } from "./getFetchFn.mjs";
 import { makeRequest } from "./makeRequest.mjs";
+import { redactUrl } from "./redactUrl.mjs";
 import { requestWithRetries } from "./requestWithRetries.mjs";
 import { Supplier } from "./Supplier.mjs";
 /**
@@ -76,8 +77,10 @@ export function makePassthroughRequest(input, init, clientOptions, requestOption
                 }
             }
         }
-        // Apply auth headers
-        if (clientOptions.getAuthHeaders != null) {
+        // Apply auth headers, but only when the resolved URL targets the configured base URL.
+        // This prevents the SDK's credentials from leaking to an unrelated host when a caller
+        // passes an absolute cross-origin URL into the passthrough fetch escape hatch.
+        if (clientOptions.getAuthHeaders != null && targetsBaseUrl(fullUrl, baseUrl)) {
             const authHeaders = yield clientOptions.getAuthHeaders();
             for (const [key, value] of Object.entries(authHeaders)) {
                 mergedHeaders[key.toLowerCase()] = value;
@@ -112,7 +115,7 @@ export function makePassthroughRequest(input, init, clientOptions, requestOption
         if (logger.isDebug()) {
             logger.debug("Making passthrough HTTP request", {
                 method,
-                url: fullUrl,
+                url: redactUrl(fullUrl),
                 hasBody: body != null,
             });
         }
@@ -123,10 +126,29 @@ export function makePassthroughRequest(input, init, clientOptions, requestOption
         if (logger.isDebug()) {
             logger.debug("Passthrough HTTP request completed", {
                 method,
-                url: fullUrl,
+                url: redactUrl(fullUrl),
                 statusCode: response.status,
             });
         }
         return response;
     });
 }
+/**
+ * Returns true when the resolved request URL points at the same origin as the
+ * configured base URL. Relative paths are always joined onto the base URL, so
+ * they resolve to the base origin and return true. Absolute URLs only match when
+ * their origin equals the base origin. When there is no base URL to compare
+ * against, or either value is not a parseable absolute URL, this returns false so
+ * auth headers are not attached.
+ */
+function targetsBaseUrl(fullUrl, baseUrl) {
+    if (baseUrl == null) {
+        return false;
+    }
+    try {
+        return new URL(fullUrl).origin === new URL(baseUrl).origin;
+    }
+    catch (_a) {
+        return false;
+    }
+}

package/dist/esm/core/fetcher/redactUrl.d.mts

@@ -0,0 +1,2 @@
+export declare const SENSITIVE_QUERY_PARAMS: Set<string>;
+export declare function redactUrl(url: string): string;

package/dist/esm/core/fetcher/redactUrl.mjs

@@ -0,0 +1,84 @@
+export const SENSITIVE_QUERY_PARAMS = new Set([
+    "api_key",
+    "api-key",
+    "apikey",
+    "token",
+    "access_token",
+    "access-token",
+    "auth_token",
+    "auth-token",
+    "password",
+    "passwd",
+    "secret",
+    "api_secret",
+    "api-secret",
+    "apisecret",
+    "key",
+    "session",
+    "session_id",
+    "session-id",
+]);
+export function redactUrl(url) {
+    const protocolIndex = url.indexOf("://");
+    if (protocolIndex === -1)
+        return url;
+    const afterProtocol = protocolIndex + 3;
+    // Find the first delimiter that marks the end of the authority section
+    const pathStart = url.indexOf("/", afterProtocol);
+    let queryStart = url.indexOf("?", afterProtocol);
+    let fragmentStart = url.indexOf("#", afterProtocol);
+    const firstDelimiter = Math.min(pathStart === -1 ? url.length : pathStart, queryStart === -1 ? url.length : queryStart, fragmentStart === -1 ? url.length : fragmentStart);
+    // Find the LAST @ before the delimiter (handles multiple @ in credentials)
+    let atIndex = -1;
+    for (let i = afterProtocol; i < firstDelimiter; i++) {
+        if (url[i] === "@") {
+            atIndex = i;
+        }
+    }
+    if (atIndex !== -1) {
+        url = `${url.slice(0, afterProtocol)}[REDACTED]@${url.slice(atIndex + 1)}`;
+    }
+    // Recalculate queryStart since url might have changed
+    queryStart = url.indexOf("?");
+    if (queryStart === -1)
+        return url;
+    fragmentStart = url.indexOf("#", queryStart);
+    const queryEnd = fragmentStart !== -1 ? fragmentStart : url.length;
+    const queryString = url.slice(queryStart + 1, queryEnd);
+    if (queryString.length === 0)
+        return url;
+    // FAST PATH: Quick check if any sensitive keywords present
+    // Using indexOf is faster than regex for simple substring matching
+    const lower = queryString.toLowerCase();
+    const hasSensitive = lower.includes("token") ||
+        lower.includes("key") ||
+        lower.includes("password") ||
+        lower.includes("passwd") ||
+        lower.includes("secret") ||
+        lower.includes("session") ||
+        lower.includes("auth");
+    if (!hasSensitive) {
+        return url;
+    }
+    // SLOW PATH: Parse and redact
+    const redactedParams = [];
+    const params = queryString.split("&");
+    for (const param of params) {
+        const equalIndex = param.indexOf("=");
+        if (equalIndex === -1) {
+            redactedParams.push(param);
+            continue;
+        }
+        const key = param.slice(0, equalIndex);
+        let shouldRedact = SENSITIVE_QUERY_PARAMS.has(key.toLowerCase());
+        if (!shouldRedact && key.includes("%")) {
+            try {
+                const decodedKey = decodeURIComponent(key);
+                shouldRedact = SENSITIVE_QUERY_PARAMS.has(decodedKey.toLowerCase());
+            }
+            catch (_a) { }
+        }
+        redactedParams.push(shouldRedact ? `${key}=[REDACTED]` : param);
+    }
+    return url.slice(0, queryStart + 1) + redactedParams.join("&") + url.slice(queryEnd);
+}

package/dist/esm/serialization/types/BadGatewayErrorBodyErrorsItemMeta.d.mts

@@ -2,11 +2,13 @@ import type * as Natural from "../../api/index.mjs";
 import * as core from "../../core/index.mjs";
 import type * as serializers from "../index.mjs";
 import { BadGatewayErrorBodyErrorsItemMetaConnectionStatus } from "./BadGatewayErrorBodyErrorsItemMetaConnectionStatus.mjs";
+import { BadGatewayErrorBodyErrorsItemMetaLimitScope } from "./BadGatewayErrorBodyErrorsItemMetaLimitScope.mjs";
 import { BadGatewayErrorBodyErrorsItemMetaProvider } from "./BadGatewayErrorBodyErrorsItemMetaProvider.mjs";
 export declare const BadGatewayErrorBodyErrorsItemMeta: core.serialization.ObjectSchema<serializers.BadGatewayErrorBodyErrorsItemMeta.Raw, Natural.BadGatewayErrorBodyErrorsItemMeta>;
 export declare namespace BadGatewayErrorBodyErrorsItemMeta {
     interface Raw {
         supportId: string;
+        limitScope?: BadGatewayErrorBodyErrorsItemMetaLimitScope.Raw | null;
         connectionStatus?: BadGatewayErrorBodyErrorsItemMetaConnectionStatus.Raw | null;
         provider?: BadGatewayErrorBodyErrorsItemMetaProvider.Raw | null;
     }

package/dist/esm/serialization/types/BadGatewayErrorBodyErrorsItemMeta.mjs

@@ -1,9 +1,11 @@
 // This file was auto-generated by Fern from our API Definition.
 import * as core from "../../core/index.mjs";
 import { BadGatewayErrorBodyErrorsItemMetaConnectionStatus } from "./BadGatewayErrorBodyErrorsItemMetaConnectionStatus.mjs";
+import { BadGatewayErrorBodyErrorsItemMetaLimitScope } from "./BadGatewayErrorBodyErrorsItemMetaLimitScope.mjs";
 import { BadGatewayErrorBodyErrorsItemMetaProvider } from "./BadGatewayErrorBodyErrorsItemMetaProvider.mjs";
 export const BadGatewayErrorBodyErrorsItemMeta = core.serialization.object({
     supportId: core.serialization.string(),
+    limitScope: BadGatewayErrorBodyErrorsItemMetaLimitScope.optional(),
     connectionStatus: BadGatewayErrorBodyErrorsItemMetaConnectionStatus.optional(),
     provider: BadGatewayErrorBodyErrorsItemMetaProvider.optional(),
 });

package/dist/esm/serialization/types/BadGatewayErrorBodyErrorsItemMetaLimitScope.d.mts

@@ -0,0 +1,7 @@
+import type * as Natural from "../../api/index.mjs";
+import * as core from "../../core/index.mjs";
+import type * as serializers from "../index.mjs";
+export declare const BadGatewayErrorBodyErrorsItemMetaLimitScope: core.serialization.Schema<serializers.BadGatewayErrorBodyErrorsItemMetaLimitScope.Raw, Natural.BadGatewayErrorBodyErrorsItemMetaLimitScope>;
+export declare namespace BadGatewayErrorBodyErrorsItemMetaLimitScope {
+    type Raw = "merchant" | "program";
+}

package/dist/esm/serialization/types/BadGatewayErrorBodyErrorsItemMetaLimitScope.mjs

@@ -0,0 +1,3 @@
+// This file was auto-generated by Fern from our API Definition.
+import * as core from "../../core/index.mjs";
+export const BadGatewayErrorBodyErrorsItemMetaLimitScope = core.serialization.enum_(["merchant", "program"]);

package/dist/esm/serialization/types/BadRequestErrorBodyErrorsItemMeta.d.mts

@@ -2,11 +2,13 @@ import type * as Natural from "../../api/index.mjs";
 import * as core from "../../core/index.mjs";
 import type * as serializers from "../index.mjs";
 import { BadRequestErrorBodyErrorsItemMetaConnectionStatus } from "./BadRequestErrorBodyErrorsItemMetaConnectionStatus.mjs";
+import { BadRequestErrorBodyErrorsItemMetaLimitScope } from "./BadRequestErrorBodyErrorsItemMetaLimitScope.mjs";
 import { BadRequestErrorBodyErrorsItemMetaProvider } from "./BadRequestErrorBodyErrorsItemMetaProvider.mjs";
 export declare const BadRequestErrorBodyErrorsItemMeta: core.serialization.ObjectSchema<serializers.BadRequestErrorBodyErrorsItemMeta.Raw, Natural.BadRequestErrorBodyErrorsItemMeta>;
 export declare namespace BadRequestErrorBodyErrorsItemMeta {
     interface Raw {
         supportId: string;
+        limitScope?: BadRequestErrorBodyErrorsItemMetaLimitScope.Raw | null;
         connectionStatus?: BadRequestErrorBodyErrorsItemMetaConnectionStatus.Raw | null;
         provider?: BadRequestErrorBodyErrorsItemMetaProvider.Raw | null;
     }

package/dist/esm/serialization/types/BadRequestErrorBodyErrorsItemMeta.mjs

@@ -1,9 +1,11 @@
 // This file was auto-generated by Fern from our API Definition.
 import * as core from "../../core/index.mjs";
 import { BadRequestErrorBodyErrorsItemMetaConnectionStatus } from "./BadRequestErrorBodyErrorsItemMetaConnectionStatus.mjs";
+import { BadRequestErrorBodyErrorsItemMetaLimitScope } from "./BadRequestErrorBodyErrorsItemMetaLimitScope.mjs";
 import { BadRequestErrorBodyErrorsItemMetaProvider } from "./BadRequestErrorBodyErrorsItemMetaProvider.mjs";
 export const BadRequestErrorBodyErrorsItemMeta = core.serialization.object({
     supportId: core.serialization.string(),
+    limitScope: BadRequestErrorBodyErrorsItemMetaLimitScope.optional(),
     connectionStatus: BadRequestErrorBodyErrorsItemMetaConnectionStatus.optional(),
     provider: BadRequestErrorBodyErrorsItemMetaProvider.optional(),
 });

package/dist/esm/serialization/types/BadRequestErrorBodyErrorsItemMetaLimitScope.d.mts

@@ -0,0 +1,7 @@
+import type * as Natural from "../../api/index.mjs";
+import * as core from "../../core/index.mjs";
+import type * as serializers from "../index.mjs";
+export declare const BadRequestErrorBodyErrorsItemMetaLimitScope: core.serialization.Schema<serializers.BadRequestErrorBodyErrorsItemMetaLimitScope.Raw, Natural.BadRequestErrorBodyErrorsItemMetaLimitScope>;
+export declare namespace BadRequestErrorBodyErrorsItemMetaLimitScope {
+    type Raw = "merchant" | "program";
+}

package/dist/esm/serialization/types/BadRequestErrorBodyErrorsItemMetaLimitScope.mjs

@@ -0,0 +1,3 @@
+// This file was auto-generated by Fern from our API Definition.
+import * as core from "../../core/index.mjs";
+export const BadRequestErrorBodyErrorsItemMetaLimitScope = core.serialization.enum_(["merchant", "program"]);

package/dist/esm/serialization/types/ConflictErrorBodyErrorsItemMeta.d.mts

@@ -2,11 +2,13 @@ import type * as Natural from "../../api/index.mjs";
 import * as core from "../../core/index.mjs";
 import type * as serializers from "../index.mjs";
 import { ConflictErrorBodyErrorsItemMetaConnectionStatus } from "./ConflictErrorBodyErrorsItemMetaConnectionStatus.mjs";
+import { ConflictErrorBodyErrorsItemMetaLimitScope } from "./ConflictErrorBodyErrorsItemMetaLimitScope.mjs";
 import { ConflictErrorBodyErrorsItemMetaProvider } from "./ConflictErrorBodyErrorsItemMetaProvider.mjs";
 export declare const ConflictErrorBodyErrorsItemMeta: core.serialization.ObjectSchema<serializers.ConflictErrorBodyErrorsItemMeta.Raw, Natural.ConflictErrorBodyErrorsItemMeta>;
 export declare namespace ConflictErrorBodyErrorsItemMeta {
     interface Raw {
         supportId: string;
+        limitScope?: ConflictErrorBodyErrorsItemMetaLimitScope.Raw | null;
         connectionStatus?: ConflictErrorBodyErrorsItemMetaConnectionStatus.Raw | null;
         provider?: ConflictErrorBodyErrorsItemMetaProvider.Raw | null;
     }

package/dist/esm/serialization/types/ConflictErrorBodyErrorsItemMeta.mjs

@@ -1,9 +1,11 @@
 // This file was auto-generated by Fern from our API Definition.
 import * as core from "../../core/index.mjs";
 import { ConflictErrorBodyErrorsItemMetaConnectionStatus } from "./ConflictErrorBodyErrorsItemMetaConnectionStatus.mjs";
+import { ConflictErrorBodyErrorsItemMetaLimitScope } from "./ConflictErrorBodyErrorsItemMetaLimitScope.mjs";
 import { ConflictErrorBodyErrorsItemMetaProvider } from "./ConflictErrorBodyErrorsItemMetaProvider.mjs";
 export const ConflictErrorBodyErrorsItemMeta = core.serialization.object({
     supportId: core.serialization.string(),
+    limitScope: ConflictErrorBodyErrorsItemMetaLimitScope.optional(),
     connectionStatus: ConflictErrorBodyErrorsItemMetaConnectionStatus.optional(),
     provider: ConflictErrorBodyErrorsItemMetaProvider.optional(),
 });

package/dist/esm/serialization/types/ConflictErrorBodyErrorsItemMetaLimitScope.d.mts

@@ -0,0 +1,7 @@
+import type * as Natural from "../../api/index.mjs";
+import * as core from "../../core/index.mjs";
+import type * as serializers from "../index.mjs";
+export declare const ConflictErrorBodyErrorsItemMetaLimitScope: core.serialization.Schema<serializers.ConflictErrorBodyErrorsItemMetaLimitScope.Raw, Natural.ConflictErrorBodyErrorsItemMetaLimitScope>;
+export declare namespace ConflictErrorBodyErrorsItemMetaLimitScope {
+    type Raw = "merchant" | "program";
+}

package/dist/esm/serialization/types/ConflictErrorBodyErrorsItemMetaLimitScope.mjs

@@ -0,0 +1,3 @@
+// This file was auto-generated by Fern from our API Definition.
+import * as core from "../../core/index.mjs";
+export const ConflictErrorBodyErrorsItemMetaLimitScope = core.serialization.enum_(["merchant", "program"]);

package/dist/esm/serialization/types/ForbiddenErrorBodyErrorsItemMeta.d.mts

@@ -2,11 +2,13 @@ import type * as Natural from "../../api/index.mjs";
 import * as core from "../../core/index.mjs";
 import type * as serializers from "../index.mjs";
 import { ForbiddenErrorBodyErrorsItemMetaConnectionStatus } from "./ForbiddenErrorBodyErrorsItemMetaConnectionStatus.mjs";
+import { ForbiddenErrorBodyErrorsItemMetaLimitScope } from "./ForbiddenErrorBodyErrorsItemMetaLimitScope.mjs";
 import { ForbiddenErrorBodyErrorsItemMetaProvider } from "./ForbiddenErrorBodyErrorsItemMetaProvider.mjs";
 export declare const ForbiddenErrorBodyErrorsItemMeta: core.serialization.ObjectSchema<serializers.ForbiddenErrorBodyErrorsItemMeta.Raw, Natural.ForbiddenErrorBodyErrorsItemMeta>;
 export declare namespace ForbiddenErrorBodyErrorsItemMeta {
     interface Raw {
         supportId: string;
+        limitScope?: ForbiddenErrorBodyErrorsItemMetaLimitScope.Raw | null;
         connectionStatus?: ForbiddenErrorBodyErrorsItemMetaConnectionStatus.Raw | null;
         provider?: ForbiddenErrorBodyErrorsItemMetaProvider.Raw | null;
     }

package/dist/esm/serialization/types/ForbiddenErrorBodyErrorsItemMeta.mjs

@@ -1,9 +1,11 @@
 // This file was auto-generated by Fern from our API Definition.
 import * as core from "../../core/index.mjs";
 import { ForbiddenErrorBodyErrorsItemMetaConnectionStatus } from "./ForbiddenErrorBodyErrorsItemMetaConnectionStatus.mjs";
+import { ForbiddenErrorBodyErrorsItemMetaLimitScope } from "./ForbiddenErrorBodyErrorsItemMetaLimitScope.mjs";
 import { ForbiddenErrorBodyErrorsItemMetaProvider } from "./ForbiddenErrorBodyErrorsItemMetaProvider.mjs";
 export const ForbiddenErrorBodyErrorsItemMeta = core.serialization.object({
     supportId: core.serialization.string(),
+    limitScope: ForbiddenErrorBodyErrorsItemMetaLimitScope.optional(),
     connectionStatus: ForbiddenErrorBodyErrorsItemMetaConnectionStatus.optional(),
     provider: ForbiddenErrorBodyErrorsItemMetaProvider.optional(),
 });

package/dist/esm/serialization/types/ForbiddenErrorBodyErrorsItemMetaLimitScope.d.mts

@@ -0,0 +1,7 @@
+import type * as Natural from "../../api/index.mjs";
+import * as core from "../../core/index.mjs";
+import type * as serializers from "../index.mjs";
+export declare const ForbiddenErrorBodyErrorsItemMetaLimitScope: core.serialization.Schema<serializers.ForbiddenErrorBodyErrorsItemMetaLimitScope.Raw, Natural.ForbiddenErrorBodyErrorsItemMetaLimitScope>;
+export declare namespace ForbiddenErrorBodyErrorsItemMetaLimitScope {
+    type Raw = "merchant" | "program";
+}

package/dist/esm/serialization/types/ForbiddenErrorBodyErrorsItemMetaLimitScope.mjs

@@ -0,0 +1,3 @@
+// This file was auto-generated by Fern from our API Definition.
+import * as core from "../../core/index.mjs";
+export const ForbiddenErrorBodyErrorsItemMetaLimitScope = core.serialization.enum_(["merchant", "program"]);

package/dist/esm/serialization/types/InternalServerErrorBodyErrorsItemMeta.d.mts

@@ -2,11 +2,13 @@ import type * as Natural from "../../api/index.mjs";
 import * as core from "../../core/index.mjs";
 import type * as serializers from "../index.mjs";
 import { InternalServerErrorBodyErrorsItemMetaConnectionStatus } from "./InternalServerErrorBodyErrorsItemMetaConnectionStatus.mjs";
+import { InternalServerErrorBodyErrorsItemMetaLimitScope } from "./InternalServerErrorBodyErrorsItemMetaLimitScope.mjs";
 import { InternalServerErrorBodyErrorsItemMetaProvider } from "./InternalServerErrorBodyErrorsItemMetaProvider.mjs";
 export declare const InternalServerErrorBodyErrorsItemMeta: core.serialization.ObjectSchema<serializers.InternalServerErrorBodyErrorsItemMeta.Raw, Natural.InternalServerErrorBodyErrorsItemMeta>;
 export declare namespace InternalServerErrorBodyErrorsItemMeta {
     interface Raw {
         supportId: string;
+        limitScope?: InternalServerErrorBodyErrorsItemMetaLimitScope.Raw | null;
         connectionStatus?: InternalServerErrorBodyErrorsItemMetaConnectionStatus.Raw | null;
         provider?: InternalServerErrorBodyErrorsItemMetaProvider.Raw | null;
     }

package/dist/esm/serialization/types/InternalServerErrorBodyErrorsItemMeta.mjs

@@ -1,9 +1,11 @@
 // This file was auto-generated by Fern from our API Definition.
 import * as core from "../../core/index.mjs";
 import { InternalServerErrorBodyErrorsItemMetaConnectionStatus } from "./InternalServerErrorBodyErrorsItemMetaConnectionStatus.mjs";
+import { InternalServerErrorBodyErrorsItemMetaLimitScope } from "./InternalServerErrorBodyErrorsItemMetaLimitScope.mjs";
 import { InternalServerErrorBodyErrorsItemMetaProvider } from "./InternalServerErrorBodyErrorsItemMetaProvider.mjs";
 export const InternalServerErrorBodyErrorsItemMeta = core.serialization.object({
     supportId: core.serialization.string(),
+    limitScope: InternalServerErrorBodyErrorsItemMetaLimitScope.optional(),
     connectionStatus: InternalServerErrorBodyErrorsItemMetaConnectionStatus.optional(),
     provider: InternalServerErrorBodyErrorsItemMetaProvider.optional(),
 });