@schedulin/sdk 0.1.2 → 0.3.0

package/cjs/api/resources/webhooks/client/requests/RotateSecretWebhooksRequest.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @example
+ *     {
+ *         id: "id"
+ *     }
+ */
+export interface RotateSecretWebhooksRequest {
+    id: string;
+}

package/cjs/api/resources/webhooks/client/requests/RotateSecretWebhooksRequest.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/cjs/api/resources/webhooks/client/requests/TestWebhooksRequest.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @example
+ *     {
+ *         id: "id"
+ *     }
+ */
+export interface TestWebhooksRequest {
+    id: string;
+}

package/cjs/api/resources/webhooks/client/requests/TestWebhooksRequest.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/cjs/api/resources/webhooks/client/requests/UpdateWebhooksRequest.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @example
+ *     {
+ *         id: "id"
+ *     }
+ */
+export interface UpdateWebhooksRequest {
+    id: string;
+    url?: string;
+    events?: UpdateWebhooksRequest.Events.Item[];
+    description?: string | null;
+    enabled?: boolean;
+}
+export declare namespace UpdateWebhooksRequest {
+    type Events = Events.Item[];
+    namespace Events {
+        const Item: {
+            readonly PostPublished: "post.published";
+            readonly PostFailed: "post.failed";
+            readonly GenerationCompleted: "generation.completed";
+            readonly GenerationFailed: "generation.failed";
+        };
+        type Item = (typeof Item)[keyof typeof Item];
+    }
+}

package/cjs/api/resources/webhooks/client/requests/UpdateWebhooksRequest.js

@@ -0,0 +1,16 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateWebhooksRequest = void 0;
+var UpdateWebhooksRequest;
+(function (UpdateWebhooksRequest) {
+    let Events;
+    (function (Events) {
+        Events.Item = {
+            PostPublished: "post.published",
+            PostFailed: "post.failed",
+            GenerationCompleted: "generation.completed",
+            GenerationFailed: "generation.failed",
+        };
+    })(Events = UpdateWebhooksRequest.Events || (UpdateWebhooksRequest.Events = {}));
+})(UpdateWebhooksRequest || (exports.UpdateWebhooksRequest = UpdateWebhooksRequest = {}));

package/cjs/api/resources/webhooks/client/requests/index.d.ts

@@ -0,0 +1,7 @@
+export { CreateWebhooksRequest } from "./CreateWebhooksRequest.js";
+export type { DeleteWebhooksRequest } from "./DeleteWebhooksRequest.js";
+export type { ListDeliveriesWebhooksRequest } from "./ListDeliveriesWebhooksRequest.js";
+export type { RetrieveWebhooksRequest } from "./RetrieveWebhooksRequest.js";
+export type { RotateSecretWebhooksRequest } from "./RotateSecretWebhooksRequest.js";
+export type { TestWebhooksRequest } from "./TestWebhooksRequest.js";
+export { UpdateWebhooksRequest } from "./UpdateWebhooksRequest.js";

package/cjs/api/resources/webhooks/client/requests/index.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateWebhooksRequest = exports.CreateWebhooksRequest = void 0;
+var CreateWebhooksRequest_js_1 = require("./CreateWebhooksRequest.js");
+Object.defineProperty(exports, "CreateWebhooksRequest", { enumerable: true, get: function () { return CreateWebhooksRequest_js_1.CreateWebhooksRequest; } });
+var UpdateWebhooksRequest_js_1 = require("./UpdateWebhooksRequest.js");
+Object.defineProperty(exports, "UpdateWebhooksRequest", { enumerable: true, get: function () { return UpdateWebhooksRequest_js_1.UpdateWebhooksRequest; } });

package/cjs/api/resources/webhooks/exports.d.ts

@@ -0,0 +1,2 @@
+export { WebhooksClient } from "./client/Client.js";
+export * from "./client/index.js";

package/cjs/api/resources/webhooks/exports.js

@@ -0,0 +1,21 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhooksClient = void 0;
+var Client_js_1 = require("./client/Client.js");
+Object.defineProperty(exports, "WebhooksClient", { enumerable: true, get: function () { return Client_js_1.WebhooksClient; } });
+__exportStar(require("./client/index.js"), exports);

package/cjs/api/resources/webhooks/index.d.ts

@@ -0,0 +1 @@
+export * from "./client/index.js";

package/cjs/api/resources/webhooks/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./client/index.js"), exports);

package/cjs/api/types/OauthScope.d.ts

@@ -32,5 +32,17 @@ export declare const OauthScope: {
     /**
      * View organization details */
     readonly OrgRead: "org:read";
+    /**
+     * View AI generation jobs and available voices */
+    readonly AiRead: "ai:read";
+    /**
+     * Generate AI images and videos (spends AI credits) */
+    readonly AiWrite: "ai:write";
+    /**
+     * View webhook endpoints and delivery history */
+    readonly WebhooksRead: "webhooks:read";
+    /**
+     * Create, edit, and delete webhook endpoints */
+    readonly WebhooksWrite: "webhooks:write";
 };
 export type OauthScope = (typeof OauthScope)[keyof typeof OauthScope];

package/cjs/api/types/OauthScope.js

@@ -36,4 +36,16 @@ exports.OauthScope = {
     /**
      * View organization details */
     OrgRead: "org:read",
+    /**
+     * View AI generation jobs and available voices */
+    AiRead: "ai:read",
+    /**
+     * Generate AI images and videos (spends AI credits) */
+    AiWrite: "ai:write",
+    /**
+     * View webhook endpoints and delivery history */
+    WebhooksRead: "webhooks:read",
+    /**
+     * Create, edit, and delete webhook endpoints */
+    WebhooksWrite: "webhooks:write",
 };

package/cjs/api/types/PostSearch.d.ts

@@ -1,6 +1,7 @@
 export interface PostSearch {
     page?: number | undefined;
     status?: PostSearch.Status | undefined;
+    statuses?: PostSearch.Statuses.Item[] | undefined;
     approvalStatus?: PostSearch.ApprovalStatus | undefined;
     scheduledAt?: PostSearch.ScheduledAt | undefined;
     tagIds?: string[] | undefined;
@@ -17,6 +18,17 @@ export declare namespace PostSearch {
         readonly Failed: "FAILED";
     };
     type Status = (typeof Status)[keyof typeof Status];
+    type Statuses = Statuses.Item[];
+    namespace Statuses {
+        const Item: {
+            readonly Scheduled: "SCHEDULED";
+            readonly Processing: "PROCESSING";
+            readonly Completed: "COMPLETED";
+            readonly Draft: "DRAFT";
+            readonly Failed: "FAILED";
+        };
+        type Item = (typeof Item)[keyof typeof Item];
+    }
     const ApprovalStatus: {
         readonly Draft: "DRAFT";
         readonly PendingApproval: "PENDING_APPROVAL";

package/cjs/api/types/PostSearch.js

@@ -11,6 +11,16 @@ var PostSearch;
         Draft: "DRAFT",
         Failed: "FAILED",
     };
+    let Statuses;
+    (function (Statuses) {
+        Statuses.Item = {
+            Scheduled: "SCHEDULED",
+            Processing: "PROCESSING",
+            Completed: "COMPLETED",
+            Draft: "DRAFT",
+            Failed: "FAILED",
+        };
+    })(Statuses = PostSearch.Statuses || (PostSearch.Statuses = {}));
     PostSearch.ApprovalStatus = {
         Draft: "DRAFT",
         PendingApproval: "PENDING_APPROVAL",

package/cjs/api/types/PostWithRelations.d.ts

@@ -55,10 +55,31 @@ export declare namespace PostWithRelations {
                         readonly Linkedin: "linkedin";
                         readonly Pinterest: "pinterest";
                         readonly Reddit: "reddit";
+                        readonly Snapchat: "snapchat";
                         readonly Threads: "threads";
                         readonly Tiktok: "tiktok";
                         readonly Twitter: "twitter";
                         readonly Youtube: "youtube";
+                        readonly Mastodon: "mastodon";
+                        readonly Telegram: "telegram";
+                        readonly Devto: "devto";
+                        readonly Hashnode: "hashnode";
+                        readonly Medium: "medium";
+                        readonly Wordpress: "wordpress";
+                        readonly Lemmy: "lemmy";
+                        readonly Nostr: "nostr";
+                        readonly Discord: "discord";
+                        readonly Dribbble: "dribbble";
+                        readonly Farcaster: "farcaster";
+                        readonly Kick: "kick";
+                        readonly Listmonk: "listmonk";
+                        readonly Mewe: "mewe";
+                        readonly Moltbook: "moltbook";
+                        readonly Skool: "skool";
+                        readonly Slack: "slack";
+                        readonly Twitch: "twitch";
+                        readonly Vk: "vk";
+                        readonly Whop: "whop";
                     };
                     type Platform = (typeof Platform)[keyof typeof Platform];
                 }

package/cjs/api/types/PostWithRelations.js

@@ -24,10 +24,31 @@ var PostWithRelations;
                         Linkedin: "linkedin",
                         Pinterest: "pinterest",
                         Reddit: "reddit",
+                        Snapchat: "snapchat",
                         Threads: "threads",
                         Tiktok: "tiktok",
                         Twitter: "twitter",
                         Youtube: "youtube",
+                        Mastodon: "mastodon",
+                        Telegram: "telegram",
+                        Devto: "devto",
+                        Hashnode: "hashnode",
+                        Medium: "medium",
+                        Wordpress: "wordpress",
+                        Lemmy: "lemmy",
+                        Nostr: "nostr",
+                        Discord: "discord",
+                        Dribbble: "dribbble",
+                        Farcaster: "farcaster",
+                        Kick: "kick",
+                        Listmonk: "listmonk",
+                        Mewe: "mewe",
+                        Moltbook: "moltbook",
+                        Skool: "skool",
+                        Slack: "slack",
+                        Twitch: "twitch",
+                        Vk: "vk",
+                        Whop: "whop",
                     };
                 })(Item = Tags.Item || (Tags.Item = {}));
             })(Tags = Item_1.Tags || (Item_1.Tags = {}));

package/cjs/api/types/SocialAccountDisconnectedReason.d.ts

@@ -5,5 +5,6 @@ export declare const SocialAccountDisconnectedReason: {
     readonly RefreshFailed: "REFRESH_FAILED";
     readonly AccountSuspended: "ACCOUNT_SUSPENDED";
     readonly PermissionDenied: "PERMISSION_DENIED";
+    readonly EmailUnconfirmed: "EMAIL_UNCONFIRMED";
 };
 export type SocialAccountDisconnectedReason = (typeof SocialAccountDisconnectedReason)[keyof typeof SocialAccountDisconnectedReason];

package/cjs/api/types/SocialAccountDisconnectedReason.js

@@ -9,4 +9,5 @@ exports.SocialAccountDisconnectedReason = {
     RefreshFailed: "REFRESH_FAILED",
     AccountSuspended: "ACCOUNT_SUSPENDED",
     PermissionDenied: "PERMISSION_DENIED",
+    EmailUnconfirmed: "EMAIL_UNCONFIRMED",
 };

package/cjs/api/types/SocialPlatform.d.ts

@@ -6,9 +6,30 @@ export declare const SocialPlatform: {
     readonly Linkedin: "linkedin";
     readonly Pinterest: "pinterest";
     readonly Reddit: "reddit";
+    readonly Snapchat: "snapchat";
     readonly Threads: "threads";
     readonly Tiktok: "tiktok";
     readonly Twitter: "twitter";
     readonly Youtube: "youtube";
+    readonly Mastodon: "mastodon";
+    readonly Telegram: "telegram";
+    readonly Devto: "devto";
+    readonly Hashnode: "hashnode";
+    readonly Medium: "medium";
+    readonly Wordpress: "wordpress";
+    readonly Lemmy: "lemmy";
+    readonly Nostr: "nostr";
+    readonly Discord: "discord";
+    readonly Dribbble: "dribbble";
+    readonly Farcaster: "farcaster";
+    readonly Kick: "kick";
+    readonly Listmonk: "listmonk";
+    readonly Mewe: "mewe";
+    readonly Moltbook: "moltbook";
+    readonly Skool: "skool";
+    readonly Slack: "slack";
+    readonly Twitch: "twitch";
+    readonly Vk: "vk";
+    readonly Whop: "whop";
 };
 export type SocialPlatform = (typeof SocialPlatform)[keyof typeof SocialPlatform];

package/cjs/api/types/SocialPlatform.js

@@ -10,8 +10,29 @@ exports.SocialPlatform = {
     Linkedin: "linkedin",
     Pinterest: "pinterest",
     Reddit: "reddit",
+    Snapchat: "snapchat",
     Threads: "threads",
     Tiktok: "tiktok",
     Twitter: "twitter",
     Youtube: "youtube",
+    Mastodon: "mastodon",
+    Telegram: "telegram",
+    Devto: "devto",
+    Hashnode: "hashnode",
+    Medium: "medium",
+    Wordpress: "wordpress",
+    Lemmy: "lemmy",
+    Nostr: "nostr",
+    Discord: "discord",
+    Dribbble: "dribbble",
+    Farcaster: "farcaster",
+    Kick: "kick",
+    Listmonk: "listmonk",
+    Mewe: "mewe",
+    Moltbook: "moltbook",
+    Skool: "skool",
+    Slack: "slack",
+    Twitch: "twitch",
+    Vk: "vk",
+    Whop: "whop",
 };

package/cjs/core/exports.d.ts

@@ -1 +1,2 @@
+export * from "./file/exports.js";
 export * from "./logging/exports.js";

package/cjs/core/exports.js

@@ -14,4 +14,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./file/exports.js"), exports);
 __exportStar(require("./logging/exports.js"), exports);

package/cjs/core/fetcher/Fetcher.js

@@ -22,6 +22,7 @@ const getResponseBody_js_1 = require("./getResponseBody.js");
 const Headers_js_1 = require("./Headers.js");
 const makeRequest_js_1 = require("./makeRequest.js");
 const RawResponse_js_1 = require("./RawResponse.js");
+const redactUrl_js_1 = require("./redactUrl.js");
 const requestWithRetries_js_1 = require("./requestWithRetries.js");
 const SENSITIVE_HEADERS = new Set([
     "authorization",
@@ -53,100 +54,16 @@ function redactHeaders(headers) {
     }
     return filtered;
 }
-const SENSITIVE_QUERY_PARAMS = new Set([
-    "api_key",
-    "api-key",
-    "apikey",
-    "token",
-    "access_token",
-    "access-token",
-    "auth_token",
-    "auth-token",
-    "password",
-    "passwd",
-    "secret",
-    "api_secret",
-    "api-secret",
-    "apisecret",
-    "key",
-    "session",
-    "session_id",
-    "session-id",
-]);
 function redactQueryParameters(queryParameters) {
     if (queryParameters == null) {
         return undefined;
     }
     const redacted = {};
     for (const [key, value] of Object.entries(queryParameters)) {
-        redacted[key] = SENSITIVE_QUERY_PARAMS.has(key.toLowerCase()) ? "[REDACTED]" : value;
+        redacted[key] = redactUrl_js_1.SENSITIVE_QUERY_PARAMS.has(key.toLowerCase()) ? "[REDACTED]" : value;
     }
     return redacted;
 }
-function redactUrl(url) {
-    const protocolIndex = url.indexOf("://");
-    if (protocolIndex === -1)
-        return url;
-    const afterProtocol = protocolIndex + 3;
-    // Find the first delimiter that marks the end of the authority section
-    const pathStart = url.indexOf("/", afterProtocol);
-    let queryStart = url.indexOf("?", afterProtocol);
-    let fragmentStart = url.indexOf("#", afterProtocol);
-    const firstDelimiter = Math.min(pathStart === -1 ? url.length : pathStart, queryStart === -1 ? url.length : queryStart, fragmentStart === -1 ? url.length : fragmentStart);
-    // Find the LAST @ before the delimiter (handles multiple @ in credentials)
-    let atIndex = -1;
-    for (let i = afterProtocol; i < firstDelimiter; i++) {
-        if (url[i] === "@") {
-            atIndex = i;
-        }
-    }
-    if (atIndex !== -1) {
-        url = `${url.slice(0, afterProtocol)}[REDACTED]@${url.slice(atIndex + 1)}`;
-    }
-    // Recalculate queryStart since url might have changed
-    queryStart = url.indexOf("?");
-    if (queryStart === -1)
-        return url;
-    fragmentStart = url.indexOf("#", queryStart);
-    const queryEnd = fragmentStart !== -1 ? fragmentStart : url.length;
-    const queryString = url.slice(queryStart + 1, queryEnd);
-    if (queryString.length === 0)
-        return url;
-    // FAST PATH: Quick check if any sensitive keywords present
-    // Using indexOf is faster than regex for simple substring matching
-    const lower = queryString.toLowerCase();
-    const hasSensitive = lower.includes("token") ||
-        lower.includes("key") ||
-        lower.includes("password") ||
-        lower.includes("passwd") ||
-        lower.includes("secret") ||
-        lower.includes("session") ||
-        lower.includes("auth");
-    if (!hasSensitive) {
-        return url;
-    }
-    // SLOW PATH: Parse and redact
-    const redactedParams = [];
-    const params = queryString.split("&");
-    for (const param of params) {
-        const equalIndex = param.indexOf("=");
-        if (equalIndex === -1) {
-            redactedParams.push(param);
-            continue;
-        }
-        const key = param.slice(0, equalIndex);
-        let shouldRedact = SENSITIVE_QUERY_PARAMS.has(key.toLowerCase());
-        if (!shouldRedact && key.includes("%")) {
-            try {
-                const decodedKey = decodeURIComponent(key);
-                shouldRedact = SENSITIVE_QUERY_PARAMS.has(decodedKey.toLowerCase());
-            }
-            catch (_a) { }
-        }
-        redactedParams.push(shouldRedact ? `${key}=[REDACTED]` : param);
-    }
-    return url.slice(0, queryStart + 1) + redactedParams.join("&") + url.slice(queryEnd);
-}
 function getHeaders(args) {
     return __awaiter(this, void 0, void 0, function* () {
         var _a;
@@ -198,7 +115,7 @@ function fetcherImpl(args) {
         if (logger.isDebug()) {
             const metadata = {
                 method: args.method,
-                url: redactUrl(url),
+                url: (0, redactUrl_js_1.redactUrl)(url),
                 headers: redactHeaders(headers),
                 queryParameters: redactQueryParameters(args.queryParameters),
                 hasBody: requestBody != null,
@@ -213,7 +130,7 @@ function fetcherImpl(args) {
                 if (logger.isDebug()) {
                     const metadata = {
                         method: args.method,
-                        url: redactUrl(url),
+                        url: (0, redactUrl_js_1.redactUrl)(url),
                         statusCode: response.status,
                         responseHeaders: redactHeaders(response.headers),
                     };
@@ -231,7 +148,7 @@ function fetcherImpl(args) {
                 if (logger.isError()) {
                     const metadata = {
                         method: args.method,
-                        url: redactUrl(url),
+                        url: (0, redactUrl_js_1.redactUrl)(url),
                         statusCode: response.status,
                         responseHeaders: redactHeaders(Object.fromEntries(response.headers.entries())),
                     };
@@ -253,7 +170,7 @@ function fetcherImpl(args) {
                 if (logger.isError()) {
                     const metadata = {
                         method: args.method,
-                        url: redactUrl(url),
+                        url: (0, redactUrl_js_1.redactUrl)(url),
                     };
                     logger.error("HTTP request was aborted", metadata);
                 }
@@ -271,7 +188,7 @@ function fetcherImpl(args) {
                 if (logger.isError()) {
                     const metadata = {
                         method: args.method,
-                        url: redactUrl(url),
+                        url: (0, redactUrl_js_1.redactUrl)(url),
                         timeoutMs: args.timeoutMs,
                     };
                     logger.error("HTTP request timed out", metadata);
@@ -289,7 +206,7 @@ function fetcherImpl(args) {
                 if (logger.isError()) {
                     const metadata = {
                         method: args.method,
-                        url: redactUrl(url),
+                        url: (0, redactUrl_js_1.redactUrl)(url),
                         errorMessage: error.message,
                     };
                     logger.error("HTTP request failed with error", metadata);
@@ -307,7 +224,7 @@ function fetcherImpl(args) {
             if (logger.isError()) {
                 const metadata = {
                     method: args.method,
-                    url: redactUrl(url),
+                    url: (0, redactUrl_js_1.redactUrl)(url),
                     error: (0, json_js_1.toJson)(error),
                 };
                 logger.error("HTTP request failed with unknown error", metadata);

package/cjs/core/fetcher/makePassthroughRequest.js

@@ -15,6 +15,7 @@ const join_js_1 = require("../url/join.js");
 const EndpointSupplier_js_1 = require("./EndpointSupplier.js");
 const getFetchFn_js_1 = require("./getFetchFn.js");
 const makeRequest_js_1 = require("./makeRequest.js");
+const redactUrl_js_1 = require("./redactUrl.js");
 const requestWithRetries_js_1 = require("./requestWithRetries.js");
 const Supplier_js_1 = require("./Supplier.js");
 /**
@@ -79,8 +80,10 @@ function makePassthroughRequest(input, init, clientOptions, requestOptions) {
                 }
             }
         }
-        // Apply auth headers
-        if (clientOptions.getAuthHeaders != null) {
+        // Apply auth headers, but only when the resolved URL targets the configured base URL.
+        // This prevents the SDK's credentials from leaking to an unrelated host when a caller
+        // passes an absolute cross-origin URL into the passthrough fetch escape hatch.
+        if (clientOptions.getAuthHeaders != null && targetsBaseUrl(fullUrl, baseUrl)) {
             const authHeaders = yield clientOptions.getAuthHeaders();
             for (const [key, value] of Object.entries(authHeaders)) {
                 mergedHeaders[key.toLowerCase()] = value;
@@ -115,7 +118,7 @@ function makePassthroughRequest(input, init, clientOptions, requestOptions) {
         if (logger.isDebug()) {
             logger.debug("Making passthrough HTTP request", {
                 method,
-                url: fullUrl,
+                url: (0, redactUrl_js_1.redactUrl)(fullUrl),
                 hasBody: body != null,
             });
         }
@@ -126,10 +129,29 @@ function makePassthroughRequest(input, init, clientOptions, requestOptions) {
         if (logger.isDebug()) {
             logger.debug("Passthrough HTTP request completed", {
                 method,
-                url: fullUrl,
+                url: (0, redactUrl_js_1.redactUrl)(fullUrl),
                 statusCode: response.status,
             });
         }
         return response;
     });
 }
+/**
+ * Returns true when the resolved request URL points at the same origin as the
+ * configured base URL. Relative paths are always joined onto the base URL, so
+ * they resolve to the base origin and return true. Absolute URLs only match when
+ * their origin equals the base origin. When there is no base URL to compare
+ * against, or either value is not a parseable absolute URL, this returns false so
+ * auth headers are not attached.
+ */
+function targetsBaseUrl(fullUrl, baseUrl) {
+    if (baseUrl == null) {
+        return false;
+    }
+    try {
+        return new URL(fullUrl).origin === new URL(baseUrl).origin;
+    }
+    catch (_a) {
+        return false;
+    }
+}

package/cjs/core/fetcher/redactUrl.d.ts

@@ -0,0 +1,2 @@
+export declare const SENSITIVE_QUERY_PARAMS: Set<string>;
+export declare function redactUrl(url: string): string;