@numa-tech/numa 1.12.11 → 1.13.0

package/dist/gitops/errors.js

@@ -0,0 +1,59 @@
+const SENSITIVE_KEY_PARTS = [
+    "secret", "password", "passphrase", "credential", "token",
+    "privatekey", "signingkey", "encryptionkey", "apikey", "accesskey"
+];
+function sensitiveKey(key) {
+    const normalized = key.replace(/[^A-Za-z0-9]/gu, "").toLowerCase();
+    return SENSITIVE_KEY_PARTS.some((part) => normalized.includes(part));
+}
+export function redactGitOpsText(value) {
+    return value
+        .replace(/\b(Bearer|Basic)\s+[^\s,;]+/giu, "$1 [REDACTED]")
+        .replace(/([?&](?:access_token|refresh_token|token|signature|credential|api[_-]?key)=)[^&#\s]+/giu, "$1[REDACTED]")
+        .replace(/\b((?:password|passwd|token|api[_-]?key|access[_-]?token|refresh[_-]?token|secret|credential)\s*[=:]\s*)[^\s,;]+/giu, "$1[REDACTED]")
+        .replace(/(https?:\/\/)[^\s/@:]+:[^\s/@]+@/giu, "$1[REDACTED]@")
+        .replace(/("(?:accessToken|refreshToken|apiToken|clientSecret|password|secret|token|credential)"\s*:\s*")[^"]*(")/giu, "$1[REDACTED]$2")
+        .replace(/(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}(?![A-Za-z0-9_-])/gu, "[REDACTED_JWT]");
+}
+export function sanitizeGitOpsOutput(value, key = "") {
+    if (/configured$/iu.test(key) && typeof value === "boolean")
+        return value;
+    if (sensitiveKey(key))
+        return "[REDACTED]";
+    if (typeof value === "string")
+        return redactGitOpsText(value);
+    if (Array.isArray(value))
+        return value.map((item) => sanitizeGitOpsOutput(item));
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([name, item]) => [name, sanitizeGitOpsOutput(item, name)]));
+    }
+    return value;
+}
+export class GitOpsError extends Error {
+    code;
+    status;
+    requestId;
+    details;
+    constructor(message, code, status, requestId, details) {
+        super(redactGitOpsText(message));
+        this.code = code;
+        this.status = status;
+        this.requestId = requestId;
+        this.name = "GitOpsError";
+        this.details = details == null ? undefined : sanitizeGitOpsOutput(details);
+    }
+}
+export function gitOpsExitCode(error) {
+    if (error.status === 401)
+        return 3;
+    if (error.status === 403 || /(?:FORBIDDEN|PRODUCTION_GOVERNANCE_REQUIRED)/u.test(error.code))
+        return 4;
+    if (error.status === 409 || /(?:STALE|CONFLICT)/u.test(error.code))
+        return 5;
+    if ((error.status ?? 0) >= 500 || /(?:UNAVAILABLE|RECONCILE_FAILED)/u.test(error.code))
+        return 6;
+    if (/(?:CLI_INPUT|SPEC_INVALID|MANAGED_FIELD|PLAN_HASH|IDEMPOTENCY|CONFIRMATION)/u.test(error.code))
+        return 2;
+    return 1;
+}
+//# sourceMappingURL=errors.js.map

package/dist/gitops/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/gitops/errors.ts"],"names":[],"mappings":"AAAA,MAAM,mBAAmB,GAAG;IAC1B,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO;IACzD,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW;CAC1D,CAAC;AAEX,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,KAAK;SACT,OAAO,CAAC,gCAAgC,EAAE,eAAe,CAAC;SAC1D,OAAO,CAAC,yFAAyF,EAAE,cAAc,CAAC;SAClH,OAAO,CAAC,qHAAqH,EAAE,cAAc,CAAC;SAC9I,OAAO,CAAC,qCAAqC,EAAE,eAAe,CAAC;SAC/D,OAAO,CAAC,4GAA4G,EAAE,gBAAgB,CAAC;SACvI,OAAO,CAAC,iGAAiG,EAAE,gBAAgB,CAAC,CAAC;AAClI,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,GAAG,GAAG,EAAE;IAC3D,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CACjH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,WAAY,SAAQ,KAAK;IAKlB,IAAI;IACJ,MAAM;IACN,SAAS;IANX,OAAO,CAAW;IAElC,YACE,OAAe,EACC,IAAY,EACZ,MAAe,EACf,SAAkB,EAClC,OAAiB;QAEjB,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;oBALjB,IAAI;sBACJ,MAAM;yBACN,SAAS;QAIzB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC7E,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,KAAkB;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACvG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACjG,IAAI,8EAA8E,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9G,OAAO,CAAC,CAAC;AACX,CAAC"}