@numa-tech/numa 1.12.11 → 1.13.0

package/dist/repositories/errors.d.ts

@@ -0,0 +1,10 @@
+export declare function redactRepositoryText(value: string): string;
+export declare function sanitizeRepositoryOutput(value: unknown, key?: string): unknown;
+export declare class RepositoryError extends Error {
+    readonly code: string;
+    readonly status?: number | undefined;
+    readonly requestId?: string | undefined;
+    readonly details?: unknown;
+    constructor(message: string, code: string, status?: number | undefined, requestId?: string | undefined, details?: unknown);
+}
+export declare function repositoryExitCode(error: RepositoryError): number;

package/dist/repositories/errors.js

@@ -0,0 +1,60 @@
+const SENSITIVE_KEY_PARTS = [
+    "secret", "password", "passphrase", "credential", "token", "privatekey",
+    "signingkey", "encryptionkey", "apikey", "accesskey", "baseurl", "cloneurl"
+];
+function sensitiveKey(key) {
+    const normalized = key.replace(/[^A-Za-z0-9]/gu, "").toLowerCase();
+    return SENSITIVE_KEY_PARTS.some((part) => normalized.includes(part));
+}
+export function redactRepositoryText(value) {
+    return value
+        .replace(/\b(Bearer|Basic)\s+[^\s,;]+/giu, "$1 [REDACTED]")
+        .replace(/([?&](?:access_token|refresh_token|token|signature|credential|api[_-]?key)=)[^&#\s]+/giu, "$1[REDACTED]")
+        .replace(/\b((?:password|passwd|token|api[_-]?key|access[_-]?token|refresh[_-]?token|secret|credential)\s*[=:]\s*)[^\s,;]+/giu, "$1[REDACTED]")
+        .replace(/(https?:\/\/)[^\s/@:]+:[^\s/@]+@/giu, "$1[REDACTED]@")
+        .replace(/("(?:accessToken|refreshToken|apiToken|clientSecret|password|secret|token|credential)"\s*:\s*")[^"]*(")/giu, "$1[REDACTED]$2")
+        .replace(/(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}(?![A-Za-z0-9_-])/gu, "[REDACTED_JWT]");
+}
+export function sanitizeRepositoryOutput(value, key = "") {
+    if (/configured$/iu.test(key) && typeof value === "boolean")
+        return value;
+    if (sensitiveKey(key))
+        return "[REDACTED]";
+    if (typeof value === "string")
+        return redactRepositoryText(value);
+    if (Array.isArray(value))
+        return value.map((item) => sanitizeRepositoryOutput(item));
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value)
+            .map(([name, item]) => [name, sanitizeRepositoryOutput(item, name)]));
+    }
+    return value;
+}
+export class RepositoryError extends Error {
+    code;
+    status;
+    requestId;
+    details;
+    constructor(message, code, status, requestId, details) {
+        super(redactRepositoryText(message));
+        this.code = code;
+        this.status = status;
+        this.requestId = requestId;
+        this.name = "RepositoryError";
+        this.details = details == null ? undefined : sanitizeRepositoryOutput(details);
+    }
+}
+export function repositoryExitCode(error) {
+    if (error.status === 401)
+        return 3;
+    if (error.status === 403 || /(?:FORBIDDEN|GOVERNANCE_REQUIRED)/u.test(error.code))
+        return 4;
+    if (error.status === 409 || /(?:STALE|CONFLICT|PLAN_HASH)/u.test(error.code))
+        return 5;
+    if ((error.status ?? 0) >= 500 || /(?:UNAVAILABLE|RECONCILE_FAILED|RESULT_UNKNOWN)/u.test(error.code))
+        return 6;
+    if (/(?:CLI_INPUT|IDEMPOTENCY|PLAN_REQUIRED|PLAN_OPERATION)/u.test(error.code))
+        return 2;
+    return 1;
+}
+//# sourceMappingURL=errors.js.map

package/dist/repositories/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/repositories/errors.ts"],"names":[],"mappings":"AAAA,MAAM,mBAAmB,GAAG;IAC1B,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY;IACvE,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU;CACnE,CAAC;AAEX,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK;SACT,OAAO,CAAC,gCAAgC,EAAE,eAAe,CAAC;SAC1D,OAAO,CAAC,yFAAyF,EAAE,cAAc,CAAC;SAClH,OAAO,CAAC,qHAAqH,EAAE,cAAc,CAAC;SAC9I,OAAO,CAAC,qCAAqC,EAAE,eAAe,CAAC;SAC/D,OAAO,CAAC,4GAA4G,EAAE,gBAAgB,CAAC;SACvI,OAAO,CAAC,iGAAiG,EAAE,gBAAgB,CAAC,CAAC;AAClI,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc,EAAE,GAAG,GAAG,EAAE;IAC/D,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aACvE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAKtB,IAAI;IACJ,MAAM;IACN,SAAS;IANX,OAAO,CAAW;IAElC,YACE,OAAe,EACC,IAAY,EACZ,MAAe,EACf,SAAkB,EAClC,OAAiB;QAEjB,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;oBALrB,IAAI;sBACJ,MAAM;yBACN,SAAS;QAIzB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACjF,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACvD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5F,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACvF,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,kDAAkD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAChH,IAAI,yDAAyD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACzF,OAAO,CAAC,CAAC;AACX,CAAC"}