dedalus-cli 0.0.0-stage → 0.8.0

package/dist/esm/sdk/internal/utils/log.d.ts

@@ -0,0 +1,52 @@
+import { type Dedalus } from '../../client.js';
+import { RequestOptions } from '../request-options.js';
+type LogFn = (message: string, ...rest: unknown[]) => void;
+export type Logger = {
+    error: LogFn;
+    warn: LogFn;
+    info: LogFn;
+    debug: LogFn;
+};
+export type LogLevel = 'off' | 'error' | 'warn' | 'info' | 'debug';
+export declare const parseLogLevel: (maybeLevel: string | undefined, sourceName: string, client: Dedalus) => LogLevel | undefined;
+export declare function loggerFor(client: Dedalus): Logger;
+/**
+ * Replaces the value of every credential-bearing query parameter in a URL about to be logged.
+ *
+ * Rewritten on the query substring rather than through `new URL`, so a relative URL is handled the
+ * same way an absolute one is and no parse can throw on the logging path.
+ */
+export declare const redactUrl: (url: string) => string;
+/**
+ * Replaces the value of every credential-bearing header, for a `Headers` or a plain record alike.
+ *
+ * Every other value is cleaned as free text: a response can echo the request URL back, in a
+ * `Location` or a `Link`, either as written or nested and encoded in a `return_to`, and a header's
+ * name says nothing about whether its value quotes a credential.
+ */
+export declare const redactHeaders: (headers: Headers | Record<string, string>) => Record<string, string>;
+export declare const formatRequestDetails: (details: {
+    options?: RequestOptions | undefined;
+    headers?: Headers | Record<string, string> | undefined;
+    retryOfRequestLogID?: string | undefined;
+    retryOf?: string | undefined;
+    url?: string | undefined;
+    status?: number | undefined;
+    method?: string | undefined;
+    durationMs?: number | undefined;
+    message?: unknown;
+    body?: unknown;
+}) => {
+    options?: RequestOptions | undefined;
+    headers?: Headers | Record<string, string> | undefined;
+    retryOfRequestLogID?: string | undefined;
+    retryOf?: string | undefined;
+    url?: string | undefined;
+    status?: number | undefined;
+    method?: string | undefined;
+    durationMs?: number | undefined;
+    message?: unknown;
+    body?: unknown;
+};
+export {};
+//# sourceMappingURL=log.d.ts.map

package/dist/esm/sdk/internal/utils/log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../../../../src/sdk/internal/utils/log.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,KAAK,KAAK,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;AAC3D,MAAM,MAAM,MAAM,GAAG;IACnB,KAAK,EAAE,KAAK,CAAC;IACb,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,KAAK,CAAC;IACZ,KAAK,EAAE,KAAK,CAAC;CACd,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAUnE,eAAO,MAAM,aAAa,GACxB,YAAY,MAAM,GAAG,SAAS,EAC9B,YAAY,MAAM,EAClB,QAAQ,OAAO,KACd,QAAQ,GAAG,SAab,CAAC;AAsBF,wBAAgB,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAsBjD;AAuJD;;;;;GAKG;AACH,eAAO,MAAM,SAAS,GAAI,KAAK,MAAM,KAAG,MAgCvC,CAAC;AAwBF;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,GAAI,SAAS,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAM5F,CAAC;AAuEJ,eAAO,MAAM,oBAAoB,GAAI,SAAS;IAC5C,OAAO,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACrC,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IACvD,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;cAVW,cAAc,GAAG,SAAS;cAC1B,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS;0BAChC,MAAM,GAAG,SAAS;cAC9B,MAAM,GAAG,SAAS;UACtB,MAAM,GAAG,SAAS;aACf,MAAM,GAAG,SAAS;aAClB,MAAM,GAAG,SAAS;iBACd,MAAM,GAAG,SAAS;cACrB,OAAO;WACV,OAAO;CAyDf,CAAC"}

package/dist/esm/sdk/internal/utils/log.js

@@ -0,0 +1,405 @@
+// File generated from our OpenAPI spec by Scalar. See README.md for details.
+import { hasOwn } from './values.js';
+const levelNumbers = {
+    off: 0,
+    error: 200,
+    warn: 300,
+    info: 400,
+    debug: 500,
+};
+export const parseLogLevel = (maybeLevel, sourceName, client) => {
+    if (!maybeLevel) {
+        return undefined;
+    }
+    if (hasOwn(levelNumbers, maybeLevel)) {
+        return maybeLevel;
+    }
+    loggerFor(client).warn(`${sourceName} was set to ${JSON.stringify(maybeLevel)}, expected one of ${JSON.stringify(Object.keys(levelNumbers))}`);
+    return undefined;
+};
+function noop() { }
+function makeLogFn(fnLevel, logger, logLevel) {
+    if (!logger || levelNumbers[fnLevel] > levelNumbers[logLevel]) {
+        return noop;
+    }
+    else {
+        // Don't wrap logger functions, we want the stacktrace intact!
+        return logger[fnLevel].bind(logger);
+    }
+}
+const noopLogger = {
+    error: noop,
+    warn: noop,
+    info: noop,
+    debug: noop,
+};
+let cachedLoggers = /* @__PURE__ */ new WeakMap();
+export function loggerFor(client) {
+    const logger = client.logger;
+    const logLevel = client.logLevel ?? 'off';
+    if (!logger) {
+        return noopLogger;
+    }
+    const cachedLogger = cachedLoggers.get(logger);
+    if (cachedLogger && cachedLogger[0] === logLevel) {
+        return cachedLogger[1];
+    }
+    const levelLogger = {
+        error: makeLogFn('error', logger, logLevel),
+        warn: makeLogFn('warn', logger, logLevel),
+        info: makeLogFn('info', logger, logLevel),
+        debug: makeLogFn('debug', logger, logLevel),
+    };
+    cachedLoggers.set(logger, [logLevel, levelLogger]);
+    return levelLogger;
+}
+/** Value a credential is replaced with before it reaches a log line. */
+const REDACTED = '***';
+/**
+ * Header names whose value is replaced before a request or response is logged.
+ *
+ * The fixed entries are the conventional credential headers, which is all a runtime shared by every
+ * SDK could know on its own. The generated ones are the headers *this* SDK's auth schemes actually
+ * send: an OpenAPI `apiKey` scheme names its own header, and `X-Auth-Token` or `PRIVATE-TOKEN` is no
+ * less a credential for being spelled differently. Without them a `logLevel: "debug"` run prints the
+ * credential in clear text, and the generated CLI turns that level on with `--debug`, so it reaches
+ * terminals and CI logs alike.
+ */
+const REDACTED_HEADERS = new Set([
+    'authorization',
+    'api-key',
+    'x-api-key',
+    'cookie',
+    'set-cookie',
+]);
+/**
+ * Query parameters this SDK sends a credential in, from its `apiKey` schemes with `in: query`.
+ *
+ * A credential in the query string is worse off than one in a header: the request URL is logged at
+ * `info` as well as at `debug`, so it leaks a level below the one a reader would think of as
+ * verbose.
+ */
+const REDACTED_QUERY_PARAMS = [];
+/**
+ * A byte's percent-encoded spelling at any depth and in either hex case, as a pattern: `%3F`,
+ * `%3f`, `%253F`. Each extra round of encoding turns the `%` into `%25` and leaves the hex alone,
+ * and encoders disagree on which case they write the hex in.
+ */
+const encodedBytePattern = (byte) => '%(?:25)*' +
+    [...byte.toString(16).padStart(2, '0')]
+        .map((digit) => (/[a-f]/u.test(digit) ? `[${digit}${digit.toUpperCase()}]` : digit))
+        .join('');
+/**
+ * The UTF-8 bytes of one code point, worked out from `encodeURIComponent` rather than a
+ * `TextEncoder`: this runs while the module loads, and a runtime without `TextEncoder` (older React
+ * Native engines) must still be able to import the client. A lone surrogate, which has no UTF-8
+ * spelling, yields no bytes, and `namePattern` then matches that character only as written.
+ */
+const utf8Bytes = (char) => {
+    const code = char.charCodeAt(0);
+    if (char.length === 1 && code < 0x80)
+        return [code];
+    try {
+        return encodeURIComponent(char)
+            .split('%')
+            .slice(1)
+            .map((hex) => parseInt(hex, 16));
+    }
+    catch {
+        return [];
+    }
+};
+/**
+ * A pattern matching one credential query name in every spelling a URL can carry it in: each
+ * character as written or percent-encoded (its UTF-8 bytes, at any depth and in either hex case),
+ * and a space also as `+`. `redactUrl` decodes a top-level name before it compares, so this keeps
+ * a nested name, which nothing decodes, from slipping past with one of its bytes escaped
+ * (`api%5Fkey`). Only the hex ignores case, not the name.
+ */
+const namePattern = (name) => [...name]
+    .map((char) => {
+    // Only syntax characters: the pattern is compiled with the `u` flag, under which escaping
+    // anything else (`\-`) is a syntax error rather than a no-op.
+    const escaped = char.replace(/[.*+?^${}()|[\]\\/]/gu, '\\$&');
+    const encoded = utf8Bytes(char).map(encodedBytePattern).join('');
+    // A lone surrogate has no bytes to encode; an empty alternative would make it optional.
+    if (encoded === '')
+        return `(?:${escaped})`;
+    return `(?:${escaped}|${encoded}${char === ' ' ? '|\\+' : ''})`;
+})
+    .join('');
+/**
+ * Matches a credential query parameter wherever text carries one, nested or not, with the name,
+ * separator and `=` in group 1 and the value after it. `undefined` when this SDK places no
+ * credential in the query.
+ *
+ * A name counts after a separator, `?`, `&` or `;`, either literal or percent-encoded any number of
+ * times over (`%3F`, `%253F`): a server can echo a whole URL encoded inside another parameter's
+ * value, as a login redirect's `return_to` does, and splitting the outer query on `&` never looks
+ * inside it. `;` also counts because an HTML-escaped `&` reads `&amp;`. The `=` after the name can
+ * be encoded the same way. The value then runs to the next literal `&`, `#` or whitespace: an
+ * encoded `%26` may end a nested value, but stopping there would leak the rest of one a sloppy
+ * encoder left half-encoded, and masking too much is harmless. `<`, `>` and `"` end it too, since
+ * no valid URL carries them unencoded, so a `Link` header's `<url>` or a quoted URL keeps its
+ * closing delimiter. `'` does not: a query value can hold it raw. No quantifier nests inside
+ * another, so matching stays linear on hostile input.
+ */
+const QUERY_CREDENTIAL = (() => {
+    // An empty name would build a pattern that masks every `?=`.
+    const names = REDACTED_QUERY_PARAMS.filter((name) => name !== '').map(namePattern);
+    if (names.length === 0)
+        return undefined;
+    // `\u0026` is `&` as a JSON string escapes it, which Go's `encoding/json` does by default, so a
+    // URL quoted in JSON text (a header value, a non-JSON error body quoting one) carries its
+    // separators that way.
+    const separator = `(?:[?&;]|\\\\u0026|${[0x3f, 0x26, 0x3b].map(encodedBytePattern).join('|')})`;
+    const equals = `(?:=|${encodedBytePattern(0x3d)})`;
+    return new RegExp(`(${separator}(?:${names.join('|')})${equals})[^&#\\s<>"]*`, 'gu');
+})();
+/** Masks the value of every credential query parameter in `text`, nested and encoded ones included. */
+const redactQueryCredentials = (text) => QUERY_CREDENTIAL === undefined ? text : text.replace(QUERY_CREDENTIAL, `$1${REDACTED}`);
+/**
+ * Blanks the userinfo of a URL, which is a credential wherever it appears.
+ *
+ * A `--base-url` carries whatever the caller typed, and this repo already treats userinfo as secret
+ * where it handles a base URL elsewhere (`profileKey` blanks it before a URL becomes a keychain
+ * account). Both halves go rather than the password alone: a token is as often the username
+ * (`https://<token>@host`) as the password, so keeping either back still prints one shape in full.
+ */
+const redactUserinfo = (url) => {
+    const scheme = url.indexOf('://');
+    if (scheme === -1)
+        return url;
+    const start = scheme + 3;
+    // The authority ends at the first of these; an `@` past one of them belongs to a path or a query.
+    let end = url.length;
+    for (const delimiter of ['/', '?', '#']) {
+        const at = url.indexOf(delimiter, start);
+        if (at !== -1 && at < end)
+            end = at;
+    }
+    const at = url.lastIndexOf('@', end);
+    return at === -1 || at < start ? url : url.slice(0, start) + REDACTED + url.slice(at);
+};
+/**
+ * Decodes one `application/x-www-form-urlencoded` parameter name, for comparison against the list.
+ *
+ * A name reaches the URL percent-encoded, so `api%5Fkey` has to match `api_key`. A malformed escape
+ * comes back as written rather than throwing: a log line is no place to fail over one, and a name
+ * that cannot be decoded cannot match the list anyway.
+ */
+const decodeQueryName = (name) => {
+    try {
+        return decodeURIComponent(name.replace(/\+/gu, ' '));
+    }
+    catch {
+        return name;
+    }
+};
+/**
+ * Replaces the value of every credential-bearing query parameter in a URL about to be logged.
+ *
+ * Rewritten on the query substring rather than through `new URL`, so a relative URL is handled the
+ * same way an absolute one is and no parse can throw on the logging path.
+ */
+export const redactUrl = (url) => {
+    const url_ = redactUserinfo(url);
+    if (REDACTED_QUERY_PARAMS.length === 0)
+        return url_;
+    const mark = url_.indexOf('?');
+    // A path can nest an encoded URL too (`/proxy/https%3A%2F%2Fh%2Fv1%3Fapi_key%3D…`), and so can a
+    // fragment, so the text outside the query is scanned for a nested credential as well.
+    if (mark === -1)
+        return redactQueryCredentials(url_);
+    // A fragment is not part of the query, so splitting it off keeps it out of the rewrite.
+    const fragment = url_.indexOf('#', mark);
+    const end = fragment === -1 ? url_.length : fragment;
+    // Each pair is rewritten where it stands rather than round-tripped through `URLSearchParams`,
+    // whose serializer re-spells every *other* parameter in its own safe set -- a space comes back as
+    // `+`, a `~` as `%7E` -- and a logged URL that is not the one the request used is a URL nobody can
+    // paste back. Splitting and rejoining on `&` is lossless, so a URL carrying no credential comes
+    // out of this exactly as it went in.
+    const query = url_
+        .slice(mark + 1, end)
+        .split('&')
+        .map((pair) => {
+        const equals = pair.indexOf('=');
+        // A parameter with no `=` carries no value of its own, but it can still be a whole encoded URL
+        // (`?%2Fv1%3Fapi_key%3D…`), so it is scanned for a nested credential like any other value.
+        if (equals === -1)
+            return redactQueryCredentials(pair);
+        const name = pair.slice(0, equals);
+        // Any other value still goes through `redactQueryCredentials`: it can nest a whole encoded URL
+        // that carries a credential, as a redirect target echoing the request in `return_to` does.
+        return REDACTED_QUERY_PARAMS.includes(decodeQueryName(name))
+            ? name + '=' + REDACTED
+            : redactQueryCredentials(pair);
+    })
+        .join('&');
+    return redactQueryCredentials(url_.slice(0, mark)) + '?' + query + redactQueryCredentials(url_.slice(end));
+};
+/**
+ * Replaces credential values in a caller-supplied query object.
+ *
+ * The client merges its own auth query into the URL, but a caller may pass the same parameter here
+ * and `buildURL` lets that value win — so it is as live a credential as the one in the URL.
+ */
+const redactQuery = (query) => {
+    const redacted = { ...query };
+    for (const [name, value] of Object.entries(redacted)) {
+        // Every other string value is cleaned as text: an operation parameter such as `return_to` can
+        // hold a URL that carries the credential, and the URL logged beside this masks it there.
+        if (typeof value === 'string')
+            redacted[name] = redactText(value);
+        else if (Array.isArray(value)) {
+            redacted[name] = value.map((item) => (typeof item === 'string' ? redactText(item) : item));
+        }
+    }
+    for (const name of REDACTED_QUERY_PARAMS) {
+        if (hasOwn(redacted, name))
+            redacted[name] = REDACTED;
+    }
+    return redacted;
+};
+/**
+ * Replaces the value of every credential-bearing header, for a `Headers` or a plain record alike.
+ *
+ * Every other value is cleaned as free text: a response can echo the request URL back, in a
+ * `Location` or a `Link`, either as written or nested and encoded in a `return_to`, and a header's
+ * name says nothing about whether its value quotes a credential.
+ */
+export const redactHeaders = (headers) => Object.fromEntries((headers instanceof Headers ? [...headers] : Object.entries(headers)).map(([name, value]) => [
+    name,
+    REDACTED_HEADERS.has(name.toLowerCase()) ? REDACTED : redactText(value),
+]));
+/**
+ * URL-shaped runs inside free text, for their userinfo. Whitespace, quotes, `<` and `>` end one, so
+ * two quoted URLs side by side stay two matches, each with its own userinfo masked, and an `@`
+ * further on in the text is not taken for one.
+ */
+const URL_IN_TEXT = /\bhttps?:\/\/[^\s"'<>]+/gu;
+/**
+ * Text that cannot hold a URL credential: no query separator (literal, encoded or JSON-escaped), no
+ * `%` escape, no scheme.
+ */
+const NO_URL_CREDENTIAL = /^[^?&;%:\\]*$/u;
+/**
+ * Redacts free text that may quote a URL anywhere in it: the userinfo of every absolute URL, then
+ * every credential query parameter anywhere in the text, which covers an absolute URL's own query,
+ * a relative URL (a `Location` of `/login?api_key=…`) and one nested, encoded, inside another
+ * parameter's value alike.
+ *
+ * Runs for every SDK, not only those with a query credential: Node's `fetch` rejects a URL carrying
+ * userinfo with a message that quotes the whole URL back (`Request cannot be constructed from a URL
+ * that includes credentials: …`), and that message is logged on the connection-failure path. Gating
+ * this on the query list left the password in the log for every SDK whose document happens not to
+ * put a credential in the query.
+ *
+ * Only the userinfo and the credential values are rewritten, never the whole string: a message is
+ * not a query string, and handing one to `URLSearchParams` wholesale would swallow everything after
+ * the first parameter and take the diagnostic with it. The query scan runs over the whole text in one
+ * pass rather than URL by URL, because where a URL ends in prose is a guess and a credential value
+ * can hold a raw `'` or end in punctuation: a masked value runs to the next whitespace, `&`, `#`,
+ * `<`, `>` or `"`, so punctuation right after it (`(https://h/v1?api_key=***): error`) goes with it.
+ * Text with none of the characters a credential needs is returned as is, since header values pass
+ * through here on every request whether or not anything logs them.
+ */
+const redactText = (text) => NO_URL_CREDENTIAL.test(text) ? text : redactQueryCredentials(text.replace(URL_IN_TEXT, redactUserinfo));
+/**
+ * What a log line says about a request or response body: its kind and size, never its content.
+ *
+ * A body is the data an API exists to move — a token endpoint's answer, a customer's records — and
+ * no list of field names can tell which parts of it are secret, while a debug log ends up in CI
+ * output and support tickets. The response's `content-type` is logged with its headers beside this.
+ */
+const describeBody = (body) => {
+    if (body === null)
+        return '[empty body]';
+    if (typeof body === 'string')
+        return `[text body: ${body.length} characters]`;
+    if (body instanceof ArrayBuffer)
+        return `[binary body: ${body.byteLength} bytes]`;
+    if (ArrayBuffer.isView(body))
+        return `[binary body: ${body.byteLength} bytes]`;
+    const BlobClass = globalThis.Blob;
+    if (BlobClass && body instanceof BlobClass) {
+        return `[binary body: ${body.size} bytes${body.type ? `, ${body.type}` : ''}]`;
+    }
+    if (typeof body === 'object') {
+        // Plain data first: a parsed JSON body is a plain object or array, and its own `constructor` key
+        // is server text, so the class name is read only off an object that is neither.
+        const proto = Object.getPrototypeOf(body);
+        if (!Array.isArray(body) && proto !== Object.prototype && proto !== null) {
+            const name = proto.constructor?.name;
+            return typeof name === 'string' && name ? `[${name} body]` : '[object body]';
+        }
+        // Its shape rather than its serialized length: this runs on every parsed response whether or
+        // not debug logging is on, and serializing a large body just to measure it would cost each call.
+        if (Array.isArray(body))
+            return `[JSON body: array of ${body.length} items]`;
+        return `[JSON body: object with ${Object.keys(body).length} keys]`;
+    }
+    return `[${typeof body} body]`;
+};
+export const formatRequestDetails = (details) => {
+    if (details.options) {
+        // Swept through a record view rather than field by field: not every field below is declared on
+        // `RequestOptions` in every profile (`serverURL` belongs to the Speakeasy compatibility one),
+        // and the copy is what keeps the caller's own options object untouched.
+        const options = { ...details.options };
+        delete options['headers']; // redundant + leaks internals
+        // The Speakeasy profile re-adds a header bag under `fetchOptions`, and the client reads it as
+        // the request's headers whenever the flattened one is absent -- so it holds the credential a
+        // migrated call site passes. Dropped for the same reason as the field above rather than
+        // redacted, because `HeadersLike` also takes shapes (an array of pairs, `null`) that the header
+        // redaction does not, and the sent headers are already reported beside this, redacted.
+        const fetchOptions = options['fetchOptions'];
+        if (fetchOptions && typeof fetchOptions === 'object') {
+            const copy = { ...fetchOptions };
+            delete copy['headers'];
+            options['fetchOptions'] = copy;
+        }
+        const query = options['query'];
+        if (query && typeof query === 'object')
+            options['query'] = redactQuery(query);
+        if (options['body'] !== undefined)
+            options['body'] = describeBody(options['body']);
+        // These three are URL strings, not route fragments: `buildURL` takes an absolute `path` whole --
+        // userinfo, query string and all -- while `defaultBaseURL` and the Speakeasy profile's
+        // `serverURL` each replace the base URL outright. The caller-supplied escape hatches therefore
+        // carry a credential exactly as readily as the resolved URL beside them does. `serverURL` may
+        // be a `URL`, whose `username` and `password` print as fields of their own, so the redacted
+        // string goes back rather than the object.
+        for (const field of ['path', 'defaultBaseURL', 'serverURL']) {
+            const value = options[field];
+            if (typeof value === 'string')
+                options[field] = redactUrl(value);
+            else if (value instanceof URL)
+                options[field] = redactUrl(value.toString());
+        }
+        details.options = options;
+    }
+    if (details.body !== undefined) {
+        details.body = describeBody(details.body);
+    }
+    if (details.url) {
+        details.url = redactUrl(details.url);
+    }
+    if (details.headers) {
+        details.headers = redactHeaders(details.headers);
+    }
+    // The message is whatever the fetch implementation threw, and Deno's connection errors quote the
+    // request URL inside their text (see the note at the `connection failed` call sites), so a query
+    // credential rides along in a field none of the checks above look at.
+    if (typeof details.message === 'string') {
+        details.message = redactText(details.message);
+    }
+    if ('retryOfRequestLogID' in details) {
+        if (details.retryOfRequestLogID) {
+            details.retryOf = details.retryOfRequestLogID;
+        }
+        delete details.retryOfRequestLogID;
+    }
+    return details;
+};
+//# sourceMappingURL=log.js.map

package/dist/esm/sdk/internal/utils/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../../../../../src/sdk/internal/utils/log.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAalC,MAAM,YAAY,GAAG;IACnB,GAAG,EAAE,CAAC;IACN,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,KAAK,EAAE,GAAG;CACX,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,UAA8B,EAC9B,UAAkB,EAClB,MAAe,EACO,EAAE;IACxB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CACpB,GAAG,UAAU,eAAe,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,qBAAqB,IAAI,CAAC,SAAS,CACvF,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAC1B,EAAE,CACJ,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,SAAS,IAAI,KAAI,CAAC;AAElB,SAAS,SAAS,CAAC,OAAqB,EAAE,MAA0B,EAAE,QAAkB;IACtF,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;SAAM,CAAC;QACN,8DAA8D;QAC9D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG;IACjB,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;CACZ,CAAC;AAEF,IAAI,aAAa,GAAG,eAAe,CAAC,IAAI,OAAO,EAA8B,CAAC;AAE9E,MAAM,UAAU,SAAS,CAAC,MAAe;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,YAAY,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,WAAW,GAAG;QAClB,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;QAC3C,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;QACzC,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;QACzC,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;KAC5C,CAAC;IAEF,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAEnD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,wEAAwE;AACxE,MAAM,QAAQ,GAAG,KAAK,CAAC;AAEvB;;;;;;;;;GASG;AACH,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,eAAe;IACf,SAAS;IACT,WAAW;IACX,QAAQ;IACR,YAAY;CACb,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAsB,EAAE,CAAC;AAEpD;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAU,EAAE,CAClD,UAAU;IACV,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;SACnF,IAAI,CAAC,EAAE,CAAC,CAAC;AAEd;;;;;GAKG;AACH,MAAM,SAAS,GAAG,CAAC,IAAY,EAAY,EAAE;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,GAAG,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,IAAI,CAAC;aAC5B,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,CAAC;aACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAC3C,CAAC,GAAG,IAAI,CAAC;KACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;IACZ,0FAA0F;IAC1F,8DAA8D;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,wFAAwF;IACxF,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,MAAM,OAAO,GAAG,CAAC;IAC5C,OAAO,MAAM,OAAO,IAAI,OAAO,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AAClE,CAAC,CAAC;KACD,IAAI,CAAC,EAAE,CAAC,CAAC;AAEd;;;;;;;;;;;;;;;GAeG;AACH,MAAM,gBAAgB,GAAuB,CAAC,GAAG,EAAE;IACjD,6DAA6D;IAC7D,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,gGAAgG;IAChG,0FAA0F;IAC1F,uBAAuB;IACvB,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAChG,MAAM,MAAM,GAAG,QAAQ,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;IACnD,OAAO,IAAI,MAAM,CAAC,IAAI,SAAS,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,eAAe,EAAE,IAAI,CAAC,CAAC;AACvF,CAAC,CAAC,EAAE,CAAC;AAEL,uGAAuG;AACvG,MAAM,sBAAsB,GAAG,CAAC,IAAY,EAAU,EAAE,CACtD,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,QAAQ,EAAE,CAAC,CAAC;AAE1F;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG,CAAC,GAAW,EAAU,EAAE;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC;IACzB,kGAAkG;IAClG,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG;YAAE,GAAG,GAAG,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,CAAC,IAAY,EAAU,EAAE;IAC/C,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE;IAC/C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,iGAAiG;IACjG,sFAAsF;IACtF,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACrD,wFAAwF;IACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrD,8FAA8F;IAC9F,kGAAkG;IAClG,mGAAmG;IACnG,gGAAgG;IAChG,qCAAqC;IACrC,MAAM,KAAK,GAAG,IAAI;SACf,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC;SACpB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,+FAA+F;QAC/F,2FAA2F;QAC3F,IAAI,MAAM,KAAK,CAAC,CAAC;YAAE,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnC,+FAA+F;QAC/F,2FAA2F;QAC3F,OAAO,qBAAqB,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC1D,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,QAAQ;YACvB,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7G,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,GAAG,CAAC,KAAa,EAAU,EAAE;IAC5C,MAAM,QAAQ,GAA4B,EAAE,GAAI,KAAiC,EAAE,CAAC;IACpF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,8FAA8F;QAC9F,yFAAyF;QACzF,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;aAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IACxD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAyC,EAA0B,EAAE,CACjG,MAAM,CAAC,WAAW,CAChB,CAAC,OAAO,YAAY,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;IAC3F,IAAI;IACJ,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;CACxE,CAAC,CACH,CAAC;AAEJ;;;;GAIG;AACH,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAEhD;;;GAGG;AACH,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAC1C,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAE1G;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,CAAC,IAAa,EAAU,EAAE;IAC7C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,eAAe,IAAI,CAAC,MAAM,cAAc,CAAC;IAC9E,IAAI,IAAI,YAAY,WAAW;QAAE,OAAO,iBAAiB,IAAI,CAAC,UAAU,SAAS,CAAC;IAClF,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,iBAAiB,IAAI,CAAC,UAAU,SAAS,CAAC;IAC/E,MAAM,SAAS,GAAI,UAAkE,CAAC,IAAI,CAAC;IAC3F,IAAI,SAAS,IAAI,IAAI,YAAY,SAAS,EAAE,CAAC;QAC3C,OAAO,iBAAiB,IAAI,CAAC,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,iGAAiG;QACjG,gFAAgF;QAChF,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACzE,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC;YACrC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC;QAC/E,CAAC;QACD,6FAA6F;QAC7F,iGAAiG;QACjG,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,wBAAwB,IAAI,CAAC,MAAM,SAAS,CAAC;QAC7E,OAAO,2BAA2B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,OAAO,IAAI,QAAQ,CAAC;AACjC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAWpC,EAAE,EAAE;IACH,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,+FAA+F;QAC/F,8FAA8F;QAC9F,wEAAwE;QACxE,MAAM,OAAO,GAA4B,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QAChE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B;QACzD,8FAA8F;QAC9F,6FAA6F;QAC7F,wFAAwF;QACxF,gGAAgG;QAChG,uFAAuF;QACvF,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,GAA4B,EAAE,GAAI,YAAwC,EAAE,CAAC;YACvF,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC;QACjC,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACnF,iGAAiG;QACjG,uFAAuF;QACvF,+FAA+F;QAC/F,8FAA8F;QAC9F,4FAA4F;QAC5F,2CAA2C;QAC3C,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;iBAC5D,IAAI,KAAK,YAAY,GAAG;gBAAE,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,CAAC,OAAO,GAAG,OAAyB,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,iGAAiG;IACjG,iGAAiG;IACjG,sEAAsE;IACtE,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,qBAAqB,IAAI,OAAO,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAChC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC;QAChD,CAAC;QACD,OAAO,OAAO,CAAC,mBAAmB,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC"}

package/dist/esm/sdk/internal/utils/path.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Percent-encode everything that isn't safe to have in a path without encoding safe chars.
+ *
+ * Taken from https://datatracker.ietf.org/doc/html/rfc3986#section-3.3:
+ * > unreserved  = ALPHA / DIGIT / "-" / "." / "_" / "~"
+ * > sub-delims  = "!" / "$" / "&" / "'" / "(" / ")" / "*" / "+" / "," / ";" / "="
+ * > pchar       = unreserved / pct-encoded / sub-delims / ":" / "@"
+ */
+export declare function encodeURIPath(str: string): string;
+/**
+ * Like {@link encodeURIPath} but leaves `/` unescaped, implementing RFC 6570 reserved expansion
+ * (`{+var}`) for path-like parameters such as a file path. The slash is part of the route shape for
+ * these params — `docs/example.txt` must stay nested under `.../files/docs/example.txt` rather than
+ * collapsing to a single `docs%2Fexample.txt` segment that points at a different backend path. Each
+ * `/`-separated segment is still run through {@link encodeURIPath}, so every other unsafe character is
+ * percent-encoded with the exact same rules, and the tag function below still rejects `.`/`..` segments,
+ * so a reserved value cannot smuggle in path traversal.
+ */
+export declare function encodeURIPathReserved(str: string): string;
+/**
+ * Wrapper marking a path-parameter value for reserved expansion. The {@link createPathTagFunction} tag
+ * detects this instance and encodes its value with {@link encodeURIPathReserved} (slash-preserving)
+ * instead of the default per-segment encoder, while leaving all other interpolated params untouched.
+ */
+declare class ReservedPathParam {
+    readonly value: string;
+    constructor(value: string);
+    toString(): string;
+}
+/**
+ * Marks a value so the `path` tag preserves `/` when encoding it (RFC 6570 reserved expansion). Used by
+ * generated request paths for parameters the spec flags with `allowReserved` (e.g. file paths).
+ */
+export declare const reserved: (value: unknown) => ReservedPathParam;
+export declare const createPathTagFunction: (pathEncoder?: typeof encodeURIPath) => (statics: readonly string[], ...params: readonly unknown[]) => string;
+/**
+ * URI-encodes path params and ensures no unsafe /./ or /../ path segments are introduced.
+ */
+export declare const path: (statics: readonly string[], ...params: readonly unknown[]) => string;
+export {};
+//# sourceMappingURL=path.d.ts.map

package/dist/esm/sdk/internal/utils/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../../../../src/sdk/internal/utils/path.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,UAExC;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,UAEhD;AAED;;;;GAIG;AACH,cAAM,iBAAiB;IACT,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAAb,KAAK,EAAE,MAAM;IAClC,QAAQ,IAAI,MAAM;CAGnB;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ,GAAI,OAAO,OAAO,KAAG,iBAAsD,CAAC;AAIjG,eAAO,MAAM,qBAAqB,GAAI,kCAA2B,MACjD,SAAS,SAAS,MAAM,EAAE,EAAE,GAAG,QAAQ,SAAS,OAAO,EAAE,KAAG,MAsEzE,CAAC;AAEJ;;GAEG;AACH,eAAO,MAAM,IAAI,YA3EQ,SAAS,MAAM,EAAE,aAAa,SAAS,OAAO,EAAE,KAAG,MA2EJ,CAAC"}

package/dist/esm/sdk/internal/utils/path.js

@@ -0,0 +1,108 @@
+import { DedalusError } from '../../core/error.js';
+/**
+ * Percent-encode everything that isn't safe to have in a path without encoding safe chars.
+ *
+ * Taken from https://datatracker.ietf.org/doc/html/rfc3986#section-3.3:
+ * > unreserved  = ALPHA / DIGIT / "-" / "." / "_" / "~"
+ * > sub-delims  = "!" / "$" / "&" / "'" / "(" / ")" / "*" / "+" / "," / ";" / "="
+ * > pchar       = unreserved / pct-encoded / sub-delims / ":" / "@"
+ */
+export function encodeURIPath(str) {
+    return str.replace(/[^A-Za-z0-9\-._~!$&'()*+,;=:@]+/g, encodeURIComponent);
+}
+/**
+ * Like {@link encodeURIPath} but leaves `/` unescaped, implementing RFC 6570 reserved expansion
+ * (`{+var}`) for path-like parameters such as a file path. The slash is part of the route shape for
+ * these params — `docs/example.txt` must stay nested under `.../files/docs/example.txt` rather than
+ * collapsing to a single `docs%2Fexample.txt` segment that points at a different backend path. Each
+ * `/`-separated segment is still run through {@link encodeURIPath}, so every other unsafe character is
+ * percent-encoded with the exact same rules, and the tag function below still rejects `.`/`..` segments,
+ * so a reserved value cannot smuggle in path traversal.
+ */
+export function encodeURIPathReserved(str) {
+    return str.split('/').map(encodeURIPath).join('/');
+}
+/**
+ * Wrapper marking a path-parameter value for reserved expansion. The {@link createPathTagFunction} tag
+ * detects this instance and encodes its value with {@link encodeURIPathReserved} (slash-preserving)
+ * instead of the default per-segment encoder, while leaving all other interpolated params untouched.
+ */
+class ReservedPathParam {
+    value;
+    constructor(value) {
+        this.value = value;
+    }
+    toString() {
+        return this.value;
+    }
+}
+/**
+ * Marks a value so the `path` tag preserves `/` when encoding it (RFC 6570 reserved expansion). Used by
+ * generated request paths for parameters the spec flags with `allowReserved` (e.g. file paths).
+ */
+export const reserved = (value) => new ReservedPathParam('' + value);
+const EMPTY = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.create(null));
+export const createPathTagFunction = (pathEncoder = encodeURIPath) => function path(statics, ...params) {
+    // If there are no params, no processing is needed.
+    if (statics.length === 1)
+        return statics[0];
+    let postPath = false;
+    const invalidSegments = [];
+    const path = statics.reduce((previousValue, currentValue, index) => {
+        if (/[?#]/.test(currentValue)) {
+            postPath = true;
+        }
+        const param = params[index];
+        // Reserved params keep `/` (file-path-like values); everything else uses the default encoder.
+        const isReserved = param instanceof ReservedPathParam;
+        const value = isReserved ? param.value : param;
+        let encoded = (postPath ? encodeURIComponent : isReserved ? encodeURIPathReserved : pathEncoder)('' + value);
+        if (index !== params.length &&
+            (value == null ||
+                (typeof value === 'object' &&
+                    // handle values from other realms
+                    value.toString ===
+                        Object.getPrototypeOf(Object.getPrototypeOf(value.hasOwnProperty ?? EMPTY) ?? EMPTY)
+                            ?.toString))) {
+            encoded = value + '';
+            invalidSegments.push({
+                start: previousValue.length + currentValue.length,
+                length: encoded.length,
+                error: `Value of type ${Object.prototype.toString
+                    .call(value)
+                    .slice(8, -1)} is not a valid path parameter`,
+            });
+        }
+        return previousValue + currentValue + (index === params.length ? '' : encoded);
+    }, '');
+    const pathOnly = path.split(/[?#]/, 1)[0];
+    const invalidSegmentPattern = /(?<=^|\/)(?:\.|%2e){1,2}(?=\/|$)/gi;
+    let match;
+    // Find all invalid segments
+    while ((match = invalidSegmentPattern.exec(pathOnly)) !== null) {
+        invalidSegments.push({
+            start: match.index,
+            length: match[0].length,
+            error: `Value "${match[0]}" can\'t be safely passed as a path parameter`,
+        });
+    }
+    invalidSegments.sort((a, b) => a.start - b.start);
+    if (invalidSegments.length > 0) {
+        let lastEnd = 0;
+        const underline = invalidSegments.reduce((acc, segment) => {
+            const spaces = ' '.repeat(segment.start - lastEnd);
+            const arrows = '^'.repeat(segment.length);
+            lastEnd = segment.start + segment.length;
+            return acc + spaces + arrows;
+        }, '');
+        throw new DedalusError(`Path parameters result in path with invalid segments:\n${invalidSegments
+            .map((e) => e.error)
+            .join('\n')}\n${path}\n${underline}`);
+    }
+    return path;
+};
+/**
+ * URI-encodes path params and ensures no unsafe /./ or /../ path segments are introduced.
+ */
+export const path = /* @__PURE__ */ createPathTagFunction(encodeURIPath);
+//# sourceMappingURL=path.js.map

package/dist/esm/sdk/internal/utils/path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../../../../../src/sdk/internal/utils/path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,GAAG,CAAC,OAAO,CAAC,kCAAkC,EAAE,kBAAkB,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,iBAAiB;IACA;IAArB,YAAqB,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IACtC,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAqB,EAAE,CAAC,IAAI,iBAAiB,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;AAEjG,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,WAAW,GAAG,aAAa,EAAE,EAAE,CACnE,SAAS,IAAI,CAAC,OAA0B,EAAE,GAAG,MAA0B;IACrE,mDAAmD;IACnD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;IAE7C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,eAAe,GAAG,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE;QACjE,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,8FAA8F;QAC9F,MAAM,UAAU,GAAG,KAAK,YAAY,iBAAiB,CAAC;QACtD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/C,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAC,CAC9F,EAAE,GAAG,KAAK,CACX,CAAC;QACF,IACE,KAAK,KAAK,MAAM,CAAC,MAAM;YACvB,CAAC,KAAK,IAAI,IAAI;gBACZ,CAAC,OAAO,KAAK,KAAK,QAAQ;oBACxB,kCAAkC;oBAClC,KAAK,CAAC,QAAQ;wBACZ,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAE,KAAa,CAAC,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;4BAC3F,EAAE,QAAQ,CAAC,CAAC,EACpB,CAAC;YACD,OAAO,GAAG,KAAK,GAAG,EAAE,CAAC;YACrB,eAAe,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,aAAa,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM;gBACjD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,iBAAiB,MAAM,CAAC,SAAS,CAAC,QAAQ;qBAC9C,IAAI,CAAC,KAAK,CAAC;qBACX,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gCAAgC;aAChD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,aAAa,GAAG,YAAY,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACjF,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;IAC3C,MAAM,qBAAqB,GAAG,oCAAoC,CAAC;IACnE,IAAI,KAAK,CAAC;IAEV,4BAA4B;IAC5B,OAAO,CAAC,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/D,eAAe,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;YACvB,KAAK,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,+CAA+C;SACzE,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAElD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;YACxD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1C,OAAO,GAAG,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;YACzC,OAAO,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC;QAC/B,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,MAAM,IAAI,YAAY,CACpB,0DAA0D,eAAe;aACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACnB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,SAAS,EAAE,CACvC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEJ;;GAEG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,eAAe,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC"}