@socketsecurity/lib 6.0.2 → 6.0.4

package/dist/http-request/headers.js

@@ -1,86 +1,101 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var headers_exports = {};
-__export(headers_exports, {
-  parseRetryAfterHeader: () => parseRetryAfterHeader,
-  sanitizeHeaders: () => sanitizeHeaders
-});
-module.exports = __toCommonJS(headers_exports);
-var import_array = require("../primordials/array");
-var import_date = require("../primordials/date");
-var import_map_set = require("../primordials/map-set");
-var import_number = require("../primordials/number");
-var import_object = require("../primordials/object");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_number = require('../primordials/number.js');
+const require_primordials_array = require('../primordials/array.js');
+const require_primordials_map_set = require('../primordials/map-set.js');
+const require_primordials_date = require('../primordials/date.js');
+const require_primordials_object = require('../primordials/object.js');
+
+//#region src/http-request/headers.ts
+/**
+* @file Header utilities for HTTP/HTTPS requests. Two pure-data helpers:
+*
+*   - `parseRetryAfterHeader` turns a `Retry-After` header value (delay-seconds
+*     OR HTTP-date per RFC 7231 §7.1.3) into a millisecond delay for `onRetry`
+*     callbacks.
+*   - `sanitizeHeaders` redacts `Authorization`, `Cookie`, and the other
+*     credential-bearing headers before they reach a logger or telemetry
+*     payload. No I/O — these can be imported anywhere without dragging the
+*     Node.js `http`/`https` modules into the bundle.
+*/
 const RETRY_AFTER_INT_RE = /^\d+$/;
+/**
+* Parse a `Retry-After` HTTP header value into milliseconds.
+*
+* Supports both formats defined in RFC 7231 §7.1.3:
+*
+* - **delay-seconds**: integer number of seconds (e.g., `"120"`)
+* - **HTTP-date**: an absolute date/time (e.g., `"Fri, 31 Dec 2027 23:59:59
+*   GMT"`)
+*
+* When the header is an array (multiple values), the first element is used.
+*
+* @example
+*   ;```ts
+*   import { setTimeout as delay } from 'node:timers/promises'
+*   const ms = parseRetryAfterHeader(response.headers['retry-after'])
+*   if (ms !== undefined) {
+*     await delay(ms)
+*   }
+*   ```
+*
+* @param value - The raw Retry-After header value(s)
+*
+* @returns Delay in milliseconds, or `undefined` if the value cannot be parsed
+*/
 function parseRetryAfterHeader(value) {
-  if (!value) {
-    return void 0;
-  }
-  const raw = (0, import_array.ArrayIsArray)(value) ? value[0] : value;
-  if (!raw) {
-    return void 0;
-  }
-  const trimmed = raw.trim();
-  if (RETRY_AFTER_INT_RE.test(trimmed)) {
-    const seconds = Number(trimmed);
-    return seconds * 1e3;
-  }
-  const date = new import_date.DateCtor(raw);
-  if (!(0, import_number.NumberIsNaN)(date.getTime())) {
-    const delayMs = date.getTime() - (0, import_date.DateNow)();
-    if (delayMs > 0) {
-      return delayMs;
-    }
-  }
-  return void 0;
+	if (!value) return;
+	const raw = require_primordials_array.ArrayIsArray(value) ? value[0] : value;
+	if (!raw) return;
+	const trimmed = raw.trim();
+	if (RETRY_AFTER_INT_RE.test(trimmed)) return Number(trimmed) * 1e3;
+	const date = new require_primordials_date.DateCtor(raw);
+	if (!require_primordials_number.NumberIsNaN(date.getTime())) {
+		const delayMs = date.getTime() - require_primordials_date.DateNow();
+		if (delayMs > 0) return delayMs;
+	}
 }
+/**
+* Redact sensitive HTTP headers for safe logging and telemetry.
+*
+* Replaces values of sensitive headers (Authorization, Cookie, etc.) with
+* `[REDACTED]`. Non-sensitive headers are passed through unchanged. Array
+* values are joined with `', '`.
+*
+* @example
+*   ;```ts
+*   const safe = sanitizeHeaders({
+*     authorization: 'Bearer secret',
+*     'content-type': 'application/json',
+*   })
+*   // { authorization: '[REDACTED]', 'content-type': 'application/json' }
+*   ```
+*
+* @param headers - HTTP headers to sanitize.
+*
+* @returns A new object with sensitive values redacted
+*/
 function sanitizeHeaders(headers) {
-  if (!headers) {
-    return {};
-  }
-  const sensitiveHeaders = new import_map_set.SetCtor([
-    "authorization",
-    "cookie",
-    "proxy-authorization",
-    "proxy-authenticate",
-    "set-cookie",
-    "www-authenticate"
-  ]);
-  const result = {
-    __proto__: null
-  };
-  for (const key of (0, import_object.ObjectKeys)(headers)) {
-    const value = headers[key];
-    if (sensitiveHeaders.has(key.toLowerCase())) {
-      result[key] = "[REDACTED]";
-    } else if ((0, import_array.ArrayIsArray)(value)) {
-      result[key] = value.join(", ");
-    } else if (value !== void 0 && value !== null) {
-      result[key] = String(value);
-    }
-  }
-  return result;
+	if (!headers) return {};
+	const sensitiveHeaders = new require_primordials_map_set.SetCtor([
+		"authorization",
+		"cookie",
+		"proxy-authorization",
+		"proxy-authenticate",
+		"set-cookie",
+		"www-authenticate"
+	]);
+	const result = { __proto__: null };
+	for (const key of require_primordials_object.ObjectKeys(headers)) {
+		const value = headers[key];
+		if (sensitiveHeaders.has(key.toLowerCase())) result[key] = "[REDACTED]";
+		else if (require_primordials_array.ArrayIsArray(value)) result[key] = value.join(", ");
+		else if (value !== void 0 && value !== null) result[key] = String(value);
+	}
+	return result;
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  parseRetryAfterHeader,
-  sanitizeHeaders
-});
+
+//#endregion
+exports.parseRetryAfterHeader = parseRetryAfterHeader;
+exports.sanitizeHeaders = sanitizeHeaders;

package/dist/http-request/http-request.js

@@ -1,36 +1,11 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var http_request_exports = {};
-__export(http_request_exports, {
-  HttpResponseError: () => import_node.HttpResponseError,
-  httpJson: () => import_node.httpJson,
-  httpRequest: () => import_node.httpRequest,
-  httpText: () => import_node.httpText
-});
-module.exports = __toCommonJS(http_request_exports);
-var import_node = require("./node");
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  HttpResponseError,
-  httpJson,
-  httpRequest,
-  httpText
-});
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_http_request_response_types = require('./response-types.js');
+const require_http_request_request = require('./request.js');
+const require_http_request_node = require('./node.js');
+
+exports.HttpResponseError = require_http_request_response_types.HttpResponseError;
+exports.httpJson = require_http_request_node.httpJson;
+exports.httpRequest = require_http_request_request.httpRequest;
+exports.httpText = require_http_request_node.httpText;

package/dist/http-request/node.js

@@ -1,102 +1,76 @@
 "use strict";
-/* Socket Lib - Built with esbuild */
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var node_exports = {};
-__export(node_exports, {
-  HttpResponseError: () => import_response_types2.HttpResponseError,
-  httpJson: () => httpJson,
-  httpRequest: () => import_request2.httpRequest,
-  httpText: () => httpText
-});
-module.exports = __toCommonJS(node_exports);
-var import_error = require("../primordials/error");
-var import_request = require("./request");
-var import_response_types = require("./response-types");
-var import_request2 = require("./request");
-var import_response_types2 = require("./response-types");
+/* Socket Lib - Built with rolldown */
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_primordials_error = require('../primordials/error.js');
+const require_http_request_response_types = require('./response-types.js');
+const require_http_request_request = require('./request.js');
+
+//#region src/http-request/node.ts
+/**
+* @file Node-side HTTP request layer — the public surface (`httpJson`,
+*   `httpText`, `httpRequest`, `HttpResponseError`) for consumers on Node.
+*   Pairs with `./browser` (browser-safe variant via `fetch`); both files
+*   expose the same named exports so the package.json `'browser'` condition can
+*   swap them by platform without consumers changing their imports. `httpJson`
+*   and `httpText` live here directly; `httpRequest` and the shared types are
+*   re-exported from their dedicated leaves so the sub-imports
+*   (`./http-request/request`, `./http-request/response-types`) stay loadable
+*   individually for callers that don't want the convenience wrappers in their
+*   bundle.
+*/
+/**
+* GET / POST a JSON endpoint. Automatically sets `Accept: application/json` and
+* `Content-Type: application/json` (when a body is present); user-supplied
+* headers always win. Throws `HttpResponseError` on non-2xx.
+*/
 async function httpJson(url, options) {
-  const {
-    body,
-    headers = {},
-    ...restOptions
-  } = {
-    __proto__: null,
-    ...options
-  };
-  const defaultHeaders = {
-    Accept: "application/json"
-  };
-  if (body) {
-    defaultHeaders["Content-Type"] = "application/json";
-  }
-  const mergedHeaders = {
-    ...defaultHeaders,
-    ...headers
-  };
-  const response = await (0, import_request.httpRequest)(url, {
-    body,
-    headers: mergedHeaders,
-    ...restOptions
-  });
-  if (!response.ok) {
-    throw new import_response_types.HttpResponseError(response);
-  }
-  try {
-    return response.json();
-  } catch (e) {
-    throw new import_error.ErrorCtor("Failed to parse JSON response", { cause: e });
-  }
+	const { body, headers = {}, ...restOptions } = {
+		__proto__: null,
+		...options
+	};
+	const defaultHeaders = { Accept: "application/json" };
+	if (body) defaultHeaders["Content-Type"] = "application/json";
+	const response = await require_http_request_request.httpRequest(url, {
+		body,
+		headers: {
+			...defaultHeaders,
+			...headers
+		},
+		...restOptions
+	});
+	if (!response.ok) throw new require_http_request_response_types.HttpResponseError(response);
+	try {
+		return response.json();
+	} catch (e) {
+		throw new require_primordials_error.ErrorCtor("Failed to parse JSON response", { cause: e });
+	}
 }
+/**
+* GET / POST a text endpoint. Sets `Accept: text/plain` (and `Content-Type:
+* text/plain` on bodies); user headers override. Throws `HttpResponseError` on
+* non-2xx.
+*/
 async function httpText(url, options) {
-  const {
-    body,
-    headers = {},
-    ...restOptions
-  } = {
-    __proto__: null,
-    ...options
-  };
-  const defaultHeaders = {
-    Accept: "text/plain"
-  };
-  if (body) {
-    defaultHeaders["Content-Type"] = "text/plain";
-  }
-  const mergedHeaders = {
-    ...defaultHeaders,
-    ...headers
-  };
-  const response = await (0, import_request.httpRequest)(url, {
-    body,
-    headers: mergedHeaders,
-    ...restOptions
-  });
-  if (!response.ok) {
-    throw new import_response_types.HttpResponseError(response);
-  }
-  return response.text();
+	const { body, headers = {}, ...restOptions } = {
+		__proto__: null,
+		...options
+	};
+	const defaultHeaders = { Accept: "text/plain" };
+	if (body) defaultHeaders["Content-Type"] = "text/plain";
+	const response = await require_http_request_request.httpRequest(url, {
+		body,
+		headers: {
+			...defaultHeaders,
+			...headers
+		},
+		...restOptions
+	});
+	if (!response.ok) throw new require_http_request_response_types.HttpResponseError(response);
+	return response.text();
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  HttpResponseError,
-  httpJson,
-  httpRequest,
-  httpText
-});
+
+//#endregion
+exports.HttpResponseError = require_http_request_response_types.HttpResponseError;
+exports.httpJson = httpJson;
+exports.httpRequest = require_http_request_request.httpRequest;
+exports.httpText = httpText;