@shivaedev/server 0.9.3 → 0.11.0

package/dist/schemaSensitiveAst.js

@@ -1,102 +0,0 @@
-import { Predicate } from "effect";
-import { isSensitiveKey } from "@shivaedev/errors/sensitive.ts";
-function children(ast) {
-    switch (ast._tag) {
-        case "Objects":
-            return [...ast.propertySignatures.map((property) => property.type), ...ast.indexSignatures.flatMap((index) => [index.parameter, index.type])];
-        case "Arrays":
-            return [...ast.elements, ...ast.rest];
-        case "Union":
-            return ast.types;
-        case "Declaration":
-            return ast.typeParameters;
-        case "Suspend":
-            return [ast.thunk()];
-        default:
-            return [];
-    }
-}
-function sensitiveCheck(check) {
-    return check.annotations?.sensitive === true || (check._tag === "FilterGroup" && check.checks.some(sensitiveCheck));
-}
-export function marked(ast, seen = new Set()) {
-    if (seen.has(ast)) {
-        return false;
-    }
-    seen.add(ast);
-    if (ast.annotations?.sensitive === true
-        || ast.context?.annotations?.sensitive === true
-        || ast.checks?.some(sensitiveCheck)
-        || (Predicate.hasProperty(ast.annotations?.representation, "id") && ast.annotations.representation.id === "effect/schema/Redacted")) {
-        return true;
-    }
-    const nested = ast._tag === "Objects" ? ast.indexSignatures.map((index) => index.type) : children(ast);
-    return (ast.encoding?.some((link) => marked(link.to, seen)) ?? false) || nested.some((type) => marked(type, seen));
-}
-function containsSensitive(ast, keys) {
-    return (marked(ast)
-        || propertiesOf(ast).some((property) => typeof property.name === "string" && (keys.has(property.name) || isSensitiveKey(property.name))));
-}
-export function collectEncodedKeys(ast, keys) {
-    let source = ast;
-    let sensitive = false;
-    for (const link of ast.encoding ?? []) {
-        sensitive ||= containsSensitive(source, keys);
-        if (sensitive) {
-            for (const property of propertiesOf(link.to)) {
-                if (typeof property.name === "string") {
-                    keys.add(property.name);
-                }
-            }
-        }
-        source = link.to;
-    }
-}
-function fixedOutput(ast) {
-    if (ast._tag === "Union") {
-        return ast.types.every(fixedOutput);
-    }
-    return ast._tag === "Objects" && ast.indexSignatures.length === 0;
-}
-export function maskedValue(ast, keys, seen = new Set()) {
-    if (seen.has(ast)) {
-        return false;
-    }
-    seen.add(ast);
-    if (marked(ast)) {
-        return true;
-    }
-    let source = ast;
-    let sensitive = false;
-    for (const link of ast.encoding ?? []) {
-        sensitive ||= containsSensitive(source, keys);
-        if (sensitive && !fixedOutput(link.to)) {
-            return true;
-        }
-        source = link.to;
-    }
-    const nested = ast._tag === "Objects" ? ast.indexSignatures.map((index) => index.type) : children(ast);
-    return nested.some((type) => maskedValue(type, keys, seen));
-}
-export function collect(ast, nodes, encodings = true) {
-    if (nodes.has(ast)) {
-        return;
-    }
-    nodes.add(ast);
-    for (const child of [...children(ast), ...(encodings ? (ast.encoding?.map((link) => link.to) ?? []) : [])]) {
-        collect(child, nodes, encodings);
-    }
-}
-function propertiesOf(ast) {
-    const nodes = new Set();
-    collect(ast, nodes, false);
-    return [...nodes].flatMap((node) => (node._tag === "Objects" ? node.propertySignatures : []));
-}
-export function collectFieldKeys(properties, keys, sensitive) {
-    for (const property of properties) {
-        if (typeof property.name === "string" && sensitive(property.type)) {
-            keys.add(property.name);
-        }
-    }
-}
-//# sourceMappingURL=schemaSensitiveAst.js.map

package/dist/schemaSensitiveAst.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemaSensitiveAst.js","sourceRoot":"","sources":["../src/schemaSensitiveAst.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAkB,MAAM,QAAQ,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEhE,SAAS,QAAQ,CAAC,GAAkB;IACnC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,SAAS;YACb,OAAO,CAAC,GAAG,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/I,KAAK,QAAQ;YACZ,OAAO,CAAC,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,KAAK,OAAO;YACX,OAAO,GAAG,CAAC,KAAK,CAAC;QAClB,KAAK,aAAa;YACjB,OAAO,GAAG,CAAC,cAAc,CAAC;QAC3B,KAAK,SAAS;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACtB;YACC,OAAO,EAAE,CAAC;IACZ,CAAC;AACF,CAAC;AACD,SAAS,cAAc,CAAC,KAA6B;IACpD,OAAO,KAAK,CAAC,WAAW,EAAE,SAAS,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;AACrH,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,GAAkB,EAAE,IAAI,GAAG,IAAI,GAAG,EAAiB;IACzE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,IACC,GAAG,CAAC,WAAW,EAAE,SAAS,KAAK,IAAI;WAChC,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,KAAK,IAAI;WAC5C,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC;WAChC,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,KAAK,wBAAwB,CAAC,EAClI,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACpH,CAAC;AACD,SAAS,iBAAiB,CAAC,GAAkB,EAAE,IAAyB;IACvE,OAAO,CACN,MAAM,CAAC,GAAG,CAAC;WACR,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CACxI,CAAC;AACH,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,GAAkB,EAAE,IAAiB;IACvE,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,SAAS,KAAK,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,SAAS,EAAE,CAAC;YACf,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9C,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACvC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;YACF,CAAC;QACF,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IAClB,CAAC;AACF,CAAC;AACD,SAAS,WAAW,CAAC,GAAkB;IACtC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC;AACnE,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,GAAkB,EAAE,IAAyB,EAAE,IAAI,GAAG,IAAI,GAAG,EAAiB;IACzG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,SAAS,KAAK,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvG,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,GAAkB,EAAE,KAAyB,EAAE,SAAS,GAAG,IAAI;IACtF,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO;IACR,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5G,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC;AACF,CAAC;AACD,SAAS,YAAY,CAAC,GAAkB;IACvC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,UAAmD,EAAE,IAAiB,EAAE,SAA0C;IAClJ,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/schemaSensitiveKeys.d.ts

@@ -1,6 +0,0 @@
-import { Rpc, type RpcGroup } from "effect/rpc";
-export declare function schemaSensitiveKeys<R extends Rpc.Any>(group: RpcGroup.RpcGroup<R>, extra?: readonly string[]): ((key: string) => boolean) & {
-    forRpc: (tag: string | undefined) => (key: string) => boolean;
-    maskFailure: (tag: string | undefined, reason: "Fail" | "Die") => boolean;
-};
-//# sourceMappingURL=schemaSensitiveKeys.d.ts.map

package/dist/schemaSensitiveKeys.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemaSensitiveKeys.d.ts","sourceRoot":"","sources":["../src/schemaSensitiveKeys.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAgChD,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,GAAE,SAAS,MAAM,EAAO,UAOxF,MAAM;kBAIf,MAAM,GAAG,SAAS,WAJT,MAAM;uBAKV,MAAM,GAAG,SAAS,UAAU,MAAM,GAAG,KAAK;EAG9D"}

package/dist/schemaSensitiveKeys.js

@@ -1,47 +0,0 @@
-import { Rpc } from "effect/rpc";
-import { isSensitiveKey } from "@shivaedev/errors/sensitive.ts";
-import { collect, collectEncodedKeys, collectFieldKeys, marked, maskedValue } from "#schemaSensitiveAst.ts";
-function rpcSensitiveKeys(rpc, extra) {
-    const keys = new Set(extra);
-    const nodes = new Set();
-    const schemas = [
-        rpc.payloadSchema,
-        rpc.successSchema,
-        rpc.errorSchema,
-        rpc.defectSchema,
-        ...[...rpc.middlewares].map((m) => m.error),
-    ];
-    for (const schema of schemas) {
-        collect(schema.ast, nodes);
-    }
-    const properties = [...nodes].flatMap((ast) => (ast._tag === "Objects" ? ast.propertySignatures : []));
-    collectFieldKeys(properties, keys, marked);
-    let previousSize;
-    do {
-        previousSize = keys.size;
-        collectFieldKeys(properties, keys, (ast) => maskedValue(ast, keys));
-        for (const ast of nodes) {
-            collectEncodedKeys(ast, keys);
-        }
-    } while (keys.size !== previousSize);
-    return Object.assign((key) => keys.has(key) || isSensitiveKey(key), {
-        die: maskedValue(rpc.defectSchema.ast, keys),
-        fail: [rpc.errorSchema, ...[...rpc.middlewares].map((m) => m.error)].some((schema) => maskedValue(schema.ast, keys)),
-    });
-}
-export function schemaSensitiveKeys(group, extra = []) {
-    const policies = new Map();
-    for (const rpc of group.requests.values()) {
-        if (Rpc.isRpc(rpc)) {
-            policies.set(rpc._tag, rpcSensitiveKeys(rpc, extra));
-        }
-    }
-    function sensitive(key) {
-        return extra.includes(key) || isSensitiveKey(key) || [...policies.values()].some((policy) => policy(key));
-    }
-    return Object.assign(sensitive, {
-        forRpc: (tag) => (tag === undefined ? sensitive : (policies.get(tag) ?? sensitive)),
-        maskFailure: (tag, reason) => [...policies].some(([method, policy]) => (tag === undefined || tag === method) && (reason === "Fail" ? policy.fail : policy.die)),
-    });
-}
-//# sourceMappingURL=schemaSensitiveKeys.js.map

package/dist/schemaSensitiveKeys.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemaSensitiveKeys.js","sourceRoot":"","sources":["../src/schemaSensitiveKeys.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAiB,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE5G,SAAS,gBAAgB,CAAC,GAAqB,EAAE,KAAwB;IACxE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,MAAM,OAAO,GAAiB;QAC7B,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,WAAW;QACf,GAAG,CAAC,YAAY;QAChB,GAAG,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;KAC3C,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvG,gBAAgB,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,YAAoB,CAAC;IACzB,GAAG,CAAC;QACH,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC;QACzB,gBAAgB,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACzB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC,QAAQ,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;QAC3E,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC;QAC5C,IAAI,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;KACpH,CAAC,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAoB,KAA2B,EAAE,KAAK,GAAsB,EAAE;IAChH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+C,CAAC;IACxE,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IACD,SAAS,SAAS,CAAC,GAAW;QAC7B,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;QAC/B,MAAM,EAAE,CAAC,GAAuB,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,CAAC;QACvG,WAAW,EAAE,CAAC,GAAuB,EAAE,MAAsB,EAAE,EAAE,CAChE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KAClI,CAAC,CAAC;AACJ,CAAC"}

package/src/redactOtlpUrl.ts

@@ -1,48 +0,0 @@
-import { REDACTED } from "@shivaedev/errors/sensitive.ts";
-
-function query(value: string): string {
-	return value
-		.split("&")
-		.map((part) => (part === "" ? part : `${part.split("=", 1)[0]}=${REDACTED}`))
-		.join("&");
-}
-
-function url(value: string): string {
-	const fragment = value.indexOf("#");
-	const target = fragment === -1 ? value : value.slice(0, fragment);
-	const separator = target.indexOf("?");
-	return (
-		(separator === -1 ? target : `${target.slice(0, separator + 1)}${query(target.slice(separator + 1))}`).replaceAll(
-			/(?<authority>(?:\b[a-z][a-z0-9+.-]*:)?\/\/)[^/?#]*@/giu,
-			`$<authority>${REDACTED}@`,
-		) + (fragment === -1 ? "" : `#${REDACTED}`)
-	);
-}
-
-function structured(value: string): string | undefined {
-	try {
-		return JSON.stringify(JSON.parse(value, (key: string, item: unknown) => (typeof item === "string" ? redactOtlpUrl(item, key) : item)));
-	} catch {
-		return undefined;
-	}
-}
-
-export function redactOtlpUrl(value: string, key = ""): string {
-	if (/(?:^|[._-])(?:fragment|userinfo|username|password)$/iu.test(key)) {
-		return REDACTED;
-	}
-	if (/(?:^|[._-])query$/iu.test(key)) {
-		return url(`?${value}`).slice(1);
-	}
-	if (/(?:^|[._-])(?:url|uri|target)(?:$|[._-])/iu.test(key) || /(?:^|[._-])(?:referer|referrer|location|origin)$/iu.test(key)) {
-		return url(value);
-	}
-	if (/^\s*[[{]/u.test(value)) {
-		const redacted = structured(value);
-		if (redacted !== undefined) {
-			return redacted;
-		}
-	}
-	// Quotes and whitespace can belong to secret values, so free text has no safe closing delimiter.
-	return value.replaceAll(/(?:[a-z][a-z0-9+.-]*:\/\/|[/?#]).*/gisu, url);
-}

package/src/schemaSensitiveAst.ts

@@ -1,106 +0,0 @@
-import { Predicate, type SchemaAST } from "effect";
-import { isSensitiveKey } from "@shivaedev/errors/sensitive.ts";
-
-function children(ast: SchemaAST.AST): readonly SchemaAST.AST[] {
-	switch (ast._tag) {
-		case "Objects":
-			return [...ast.propertySignatures.map((property) => property.type), ...ast.indexSignatures.flatMap((index) => [index.parameter, index.type])];
-		case "Arrays":
-			return [...ast.elements, ...ast.rest];
-		case "Union":
-			return ast.types;
-		case "Declaration":
-			return ast.typeParameters;
-		case "Suspend":
-			return [ast.thunk()];
-		default:
-			return [];
-	}
-}
-function sensitiveCheck(check: SchemaAST.Check<never>): boolean {
-	return check.annotations?.sensitive === true || (check._tag === "FilterGroup" && check.checks.some(sensitiveCheck));
-}
-export function marked(ast: SchemaAST.AST, seen = new Set<SchemaAST.AST>()): boolean {
-	if (seen.has(ast)) {
-		return false;
-	}
-	seen.add(ast);
-	if (
-		ast.annotations?.sensitive === true
-		|| ast.context?.annotations?.sensitive === true
-		|| ast.checks?.some(sensitiveCheck)
-		|| (Predicate.hasProperty(ast.annotations?.representation, "id") && ast.annotations.representation.id === "effect/schema/Redacted")
-	) {
-		return true;
-	}
-	const nested = ast._tag === "Objects" ? ast.indexSignatures.map((index) => index.type) : children(ast);
-	return (ast.encoding?.some((link) => marked(link.to, seen)) ?? false) || nested.some((type) => marked(type, seen));
-}
-function containsSensitive(ast: SchemaAST.AST, keys: ReadonlySet<string>): boolean {
-	return (
-		marked(ast)
-		|| propertiesOf(ast).some((property) => typeof property.name === "string" && (keys.has(property.name) || isSensitiveKey(property.name)))
-	);
-}
-export function collectEncodedKeys(ast: SchemaAST.AST, keys: Set<string>) {
-	let source = ast;
-	let sensitive = false;
-	for (const link of ast.encoding ?? []) {
-		sensitive ||= containsSensitive(source, keys);
-		if (sensitive) {
-			for (const property of propertiesOf(link.to)) {
-				if (typeof property.name === "string") {
-					keys.add(property.name);
-				}
-			}
-		}
-		source = link.to;
-	}
-}
-function fixedOutput(ast: SchemaAST.AST): boolean {
-	if (ast._tag === "Union") {
-		return ast.types.every(fixedOutput);
-	}
-	return ast._tag === "Objects" && ast.indexSignatures.length === 0;
-}
-export function maskedValue(ast: SchemaAST.AST, keys: ReadonlySet<string>, seen = new Set<SchemaAST.AST>()): boolean {
-	if (seen.has(ast)) {
-		return false;
-	}
-	seen.add(ast);
-	if (marked(ast)) {
-		return true;
-	}
-	let source = ast;
-	let sensitive = false;
-	for (const link of ast.encoding ?? []) {
-		sensitive ||= containsSensitive(source, keys);
-		if (sensitive && !fixedOutput(link.to)) {
-			return true;
-		}
-		source = link.to;
-	}
-	const nested = ast._tag === "Objects" ? ast.indexSignatures.map((index) => index.type) : children(ast);
-	return nested.some((type) => maskedValue(type, keys, seen));
-}
-export function collect(ast: SchemaAST.AST, nodes: Set<SchemaAST.AST>, encodings = true) {
-	if (nodes.has(ast)) {
-		return;
-	}
-	nodes.add(ast);
-	for (const child of [...children(ast), ...(encodings ? (ast.encoding?.map((link) => link.to) ?? []) : [])]) {
-		collect(child, nodes, encodings);
-	}
-}
-function propertiesOf(ast: SchemaAST.AST) {
-	const nodes = new Set<SchemaAST.AST>();
-	collect(ast, nodes, false);
-	return [...nodes].flatMap((node) => (node._tag === "Objects" ? node.propertySignatures : []));
-}
-export function collectFieldKeys(properties: SchemaAST.Objects["propertySignatures"], keys: Set<string>, sensitive: (ast: SchemaAST.AST) => boolean) {
-	for (const property of properties) {
-		if (typeof property.name === "string" && sensitive(property.type)) {
-			keys.add(property.name);
-		}
-	}
-}

package/src/schemaSensitiveKeys.ts

@@ -1,49 +0,0 @@
-import type { Schema, SchemaAST } from "effect";
-import { Rpc, type RpcGroup } from "effect/rpc";
-import { isSensitiveKey } from "@shivaedev/errors/sensitive.ts";
-import { collect, collectEncodedKeys, collectFieldKeys, marked, maskedValue } from "#schemaSensitiveAst.ts";
-
-function rpcSensitiveKeys(rpc: Rpc.AnyWithProps, extra: readonly string[]) {
-	const keys = new Set(extra);
-	const nodes = new Set<SchemaAST.AST>();
-	const schemas: Schema.Top[] = [
-		rpc.payloadSchema,
-		rpc.successSchema,
-		rpc.errorSchema,
-		rpc.defectSchema,
-		...[...rpc.middlewares].map((m) => m.error),
-	];
-	for (const schema of schemas) {
-		collect(schema.ast, nodes);
-	}
-	const properties = [...nodes].flatMap((ast) => (ast._tag === "Objects" ? ast.propertySignatures : []));
-	collectFieldKeys(properties, keys, marked);
-	let previousSize: number;
-	do {
-		previousSize = keys.size;
-		collectFieldKeys(properties, keys, (ast) => maskedValue(ast, keys));
-		for (const ast of nodes) {
-			collectEncodedKeys(ast, keys);
-		}
-	} while (keys.size !== previousSize);
-	return Object.assign((key: string) => keys.has(key) || isSensitiveKey(key), {
-		die: maskedValue(rpc.defectSchema.ast, keys),
-		fail: [rpc.errorSchema, ...[...rpc.middlewares].map((m) => m.error)].some((schema) => maskedValue(schema.ast, keys)),
-	});
-}
-export function schemaSensitiveKeys<R extends Rpc.Any>(group: RpcGroup.RpcGroup<R>, extra: readonly string[] = []) {
-	const policies = new Map<string, ReturnType<typeof rpcSensitiveKeys>>();
-	for (const rpc of group.requests.values()) {
-		if (Rpc.isRpc(rpc)) {
-			policies.set(rpc._tag, rpcSensitiveKeys(rpc, extra));
-		}
-	}
-	function sensitive(key: string) {
-		return extra.includes(key) || isSensitiveKey(key) || [...policies.values()].some((policy) => policy(key));
-	}
-	return Object.assign(sensitive, {
-		forRpc: (tag: string | undefined) => (tag === undefined ? sensitive : (policies.get(tag) ?? sensitive)),
-		maskFailure: (tag: string | undefined, reason: "Fail" | "Die") =>
-			[...policies].some(([method, policy]) => (tag === undefined || tag === method) && (reason === "Fail" ? policy.fail : policy.die)),
-	});
-}