kinetex 1.4.0 → 1.5.0

package/dist/cjs/graphql.js

@@ -30,6 +30,8 @@ import { ValidationError } from "./types.js";
 // FIX (H6): untrusted GraphQL responses are parsed with raw JSON.parse below —
 // sanitize prototype-pollution keys before they reach user code or merges.
 import { sanitizeParsedJSON } from "./utils.js";
+import { sleep } from "./utils.js";
+import { sha256Hex } from "./utils.js";
 // ============================================================================
 // §2  ERRORS
 // ============================================================================
@@ -82,9 +84,6 @@ function buildGraphQLError(graphQLErrors, req, res) {
     return new GraphQLClientError(message, "EGRAPHQL", graphQLErrors, req, res);
 }
 // Utility function (B-10 fix - moved before usage)
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
 function buildLinkChain(links, terminal) {
     return links.reduceRight((next, link) => (op) => link(op, next), terminal);
 }
@@ -121,14 +120,6 @@ export function extractOperationName(query) {
 // ============================================================================
 // §5  AUTOMATIC PERSISTED QUERIES (APQ)
 // ============================================================================
-async function sha256Hex(str) {
-    const encoded = new TextEncoder().encode(str);
-    const buf = encoded.buffer.slice(encoded.byteOffset, encoded.byteOffset + encoded.byteLength);
-    const hash = await crypto.subtle.digest("SHA-256", buf);
-    return Array.from(new Uint8Array(hash))
-        .map((b) => b.toString(16).padStart(2, "0"))
-        .join("");
-}
 /** Maximum APQ cache entries to prevent memory leaks */
 const MAX_APQ_CACHE_ENTRIES = 1000;
 /** APQ cache entry TTL in ms — entries older than this are evicted */

package/dist/cjs/headers.js

@@ -952,6 +952,16 @@ export function parseContentDisposition(value) {
  * @param cd - Parsed disposition value
  * @returns Formatted `Content-Disposition` header value
  */
+/**
+ * Render a `Content-Disposition` header value.
+ *
+ * Takes the fields it actually reads rather than a whole
+ * `ContentDispositionValue`: `params` is never consulted, and `name` /
+ * `filename` are already optional in the sense that matters — a null or absent
+ * one is simply not emitted. Requiring callers to write `name: null,
+ * params: new Map()` to format `{ type: "inline" }` made the signature
+ * describe a parse result rather than what formatting needs.
+ */
 export function formatContentDisposition(cd) {
     let out = cd.type;
     if (cd.name)
@@ -1180,7 +1190,11 @@ export function parseAuthorization(value) {
                     continue;
                 const k = t.slice(0, eq).trim().toLowerCase();
                 let v = t.slice(eq + 1).trim();
-                if (v.startsWith('"') && v.endsWith('"'))
+                // `length >= 2` so a lone `"` is left alone instead of becoming the
+                // empty string: `'"'.slice(1, -1)` is `""`, so without the guard a
+                // one-character value silently lost its only character. The identical
+                // strip further down (stripIPPortAndBrackets) already had this guard.
+                if (v.length >= 2 && v.startsWith('"') && v.endsWith('"'))
                     v = v.slice(1, -1);
                 params.set(k, v);
             }
@@ -1463,6 +1477,15 @@ export function parseLinkHeader(value) {
  * @param links - Parsed Link entries
  * @returns Formatted `Link` header value
  */
+/**
+ * Render an array of links as a `Link` header value.
+ *
+ * Only `uri` is required. `LinkValue` is the shape `parseLinkHeader` *returns*
+ * — every parameter present, null when absent — and a caller building a header
+ * by hand should not have to write `rel: null, type: null, hreflang: null,
+ * title: null, media: null` to say `{ uri, rel }`. The body already guards
+ * every one of them, so the parameter type now says what formatting needs.
+ */
 export function formatLinkHeader(links) {
     return links
         .map((l) => {

package/dist/cjs/interceptors.js

@@ -28,6 +28,7 @@
  *  - No dependencies, no runtime globals beyond Promise/Map/Set
  */
 import { getAuthFingerprint } from "./cache.js";
+import { perfNow, sleep, redactHeaders as redactHeaderValues } from "./utils.js";
 import { KinetexError } from "./types.js";
 import { parseHTTPDate } from "./headers.js";
 // ============================================================================
@@ -607,13 +608,9 @@ let _reqIdSeq = 0;
 export function createLoggingInterceptor(config = {}) {
     const cfg = { ...LOG_DEFAULTS, ...config };
     const redactSet = new Set(cfg.redactHeaders.map((h) => h.toLowerCase()));
-    function redactHeaders(headers) {
-        const out = {};
-        for (const [k, v] of Object.entries(headers)) {
-            out[k] = redactSet.has(k.toLowerCase()) ? "**REDACTED**" : v;
-        }
-        return out;
-    }
+    // The mask is "**REDACTED**" rather than the logger's "***" — that string is
+    // observable in this interceptor's own log output, so it is preserved here.
+    const redactHeaders = (headers) => redactHeaderValues(headers, redactSet, "**REDACTED**");
     function makeEntry(type, ctx) {
         const requestId = ctx.store.get(REQUEST_ID_KEY) ?? "unknown";
         return {
@@ -1276,16 +1273,8 @@ export function createMetricsInterceptor() {
 // ============================================================================
 // §14  UTILITIES
 // ============================================================================
-function now() {
-    // Use performance.now() when available (browser, Deno, Node 16+, Bun)
-    // Fall back to Date.now() for edge runtimes that may not expose it
-    return typeof performance !== "undefined" && typeof performance.now === "function"
-        ? performance.now()
-        : Date.now();
-}
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
+/** High-resolution monotonic clock — the one `utils.ts` exports, under a local name. */
+const now = perfNow;
 /** @internal Compute byte size of a request/response body. Exported for testing. */
 export function computeBodySize(body) {
     if (!body)

package/dist/cjs/lifecycle.js

@@ -23,6 +23,7 @@
  *  - Hook timing + tracing
  *  - Typed event emitter
  */
+import { perfNow, redactHeaders, abortError } from "./utils.js";
 /**
  * Lightweight typed event emitter for lifecycle events.
  *
@@ -811,12 +812,7 @@ export function createLoggingHooks(options = {}) {
     // cleartext by default, on a hook whose entire purpose is to log. The
     // interceptors' own logging defaults already redact all four.
     const redact = new Set((options.redactHeaders ?? ["authorization", "cookie", "set-cookie", "proxy-authorization"]).map((h) => h.toLowerCase()));
-    function safeHeaders(h) {
-        const out = {};
-        for (const [k, v] of Object.entries(h))
-            out[k] = redact.has(k.toLowerCase()) ? "***" : v;
-        return out;
-    }
+    const safeHeaders = (h) => redactHeaders(h, redact, "***");
     return {
         beforeRequest: (req) => {
             log("→ request", {
@@ -893,7 +889,7 @@ export function createAbortHook() {
         beforeRequest: (req, ctx) => {
             if (req.signal?.aborted) {
                 ctx.meta.aborted = true;
-                throw createAbortError("Request aborted before sending");
+                throw abortError("Request aborted before sending");
             }
         },
         onCancel: (evt) => {
@@ -904,18 +900,6 @@ export function createAbortHook() {
 // ============================================================================
 // §9  UTILITIES
 // ============================================================================
-// Cross-runtime: safe AbortError creation (DOMException may not exist in all runtimes)
-function createAbortError(message) {
-    if (typeof DOMException !== "undefined") {
-        return new DOMException(message, "AbortError");
-    }
-    const err = new Error(message);
-    err.name = "AbortError";
-    return err;
-}
-function perfNow() {
-    return typeof performance !== "undefined" ? performance.now() : Date.now();
-}
 /**
  * Create a new HookContext for the given request.
  *

package/dist/cjs/logging.js

@@ -27,7 +27,7 @@
  */
 // FIX (H6): logged bodies are untrusted — parsed JSON is stripped of
 // prototype-pollution keys before redaction writes (see sanitizeParsedJSON).
-import { sanitizeParsedJSON } from "./utils.js";
+import { sanitizeParsedJSON, perfNow, redactHeaders, safeStringify as stringifySafely, } from "./utils.js";
 // Cross-runtime: safely detect Node.js process.env
 const getNodeEnv = () => {
     try {
@@ -462,11 +462,7 @@ export class Redactor {
     }
     /** Redact sensitive header values, replacing them with "***". */
     redactHeaders(headers) {
-        const out = {};
-        for (const [k, v] of Object.entries(headers)) {
-            out[k] = this.headerSet.has(k.toLowerCase()) ? "***" : v;
-        }
-        return out;
+        return redactHeaders(headers, this.headerSet, "***");
     }
     /**
      * Redact sensitive query parameters from a URL.
@@ -516,9 +512,11 @@ export class Redactor {
             }
             if (!this.paramSet.has(decoded.toLowerCase()))
                 return pair;
-            // A valueless parameter (`?token`) is redacted to `token=***` so the
-            // redaction is visible rather than leaving the bare name behind.
-            return eq === -1 ? `${name}=***` : `${name}=***`;
+            // A valueless parameter (`?token`) is redacted to `token=***` rather than
+            // left as the bare name, so the redaction stays visible. The value, when
+            // there is one, is discarded either way — which is why this used to be
+            // written as a ternary whose two arms were the same string.
+            return `${name}=***`;
         });
         return `${base}?${params.join("&")}${fragment}`;
     }
@@ -957,22 +955,11 @@ function serializeError(err) {
     return { name: "Error", message: String(err) };
 }
 /** `JSON.stringify` that never throws — falls back for circular values. */
-function safeStringify(value) {
-    try {
-        const seen = new WeakSet();
-        return (JSON.stringify(value, (_k, v) => {
-            if (v !== null && typeof v === "object") {
-                if (seen.has(v))
-                    return "[circular]";
-                seen.add(v);
-            }
-            return v;
-        }) ?? String(value));
-    }
-    catch {
-        return String(value);
-    }
-}
+// The marker is lowercase here and capitalised in the shared helper. Both are
+// asserted by tests and both appear in log output, so this converges on one
+// implementation without converging on one string.
+const CIRCULAR_MARKER = "[circular]";
+const safeStringify = (value) => stringifySafely(value, CIRCULAR_MARKER);
 /**
  * Truncate a string to at most `maxBytes` UTF-8 bytes, never splitting a
  * character, and report how many bytes were actually removed.
@@ -993,10 +980,6 @@ function truncateToBytes(str, maxBytes) {
     }
     return { text: str.slice(0, end), removed: total - used };
 }
-/** Cross-runtime high-resolution timer. Falls back to Date.now() when performance.now() is unavailable. */
-function perfNow() {
-    return typeof performance !== "undefined" ? performance.now() : Date.now();
-}
 // ============================================================================
 // §10  FACTORY HELPERS
 // ============================================================================

package/dist/cjs/progress.js

@@ -20,6 +20,7 @@
  *  - Async iterator interface
  *  - Readable progress formatting (human-readable bytes, speed)
  */
+import { perfNow } from "./utils.js";
 // ============================================================================
 // §2  PROGRESS TRACKER
 // ============================================================================
@@ -926,6 +927,3 @@ export function throttleProgress(fn, hz = 10) {
 // ============================================================================
 // §10  UTILITIES
 // ============================================================================
-function perfNow() {
-    return typeof performance !== "undefined" ? performance.now() : Date.now();
-}

package/dist/cjs/proxy.js

@@ -18,6 +18,18 @@
  * @module
  */
 import { KinetexError } from "./types.js";
+/**
+ * True when `host` is an IPv4/IPv6 literal rather than a DNS name.
+ *
+ * A textual shape check rather than `node:net.isIP`, because this is a
+ * synchronous guard and the module only reaches for `node:net` through a
+ * dynamic import. Being imprecise here is harmless: the worst case is that a
+ * name the resolver dislikes is sent as SNI, and the TLS stack rejects it.
+ */
+function isIpLiteral(host) {
+    const h = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+    return h.includes(":") || /^\d+(\.\d+)*$/.test(h);
+}
 const DEFAULT_CONNECT_TIMEOUT_MS = 30_000;
 /** Maximum CONNECT response head we will buffer before giving up. */
 const MAX_HEAD_BYTES = 64 * 1024;
@@ -305,9 +317,14 @@ export async function connectThroughProxy(proxy, target, options = {}) {
             clearTimeout(tunnelTimer);
             options.signal?.removeEventListener("abort", onTunnelAbort);
         }
+        // RFC 6066 §3 forbids IP literals in SNI, and Node 26 rejects the
+        // handshake outright when one is sent; Node 22 and 24 ignored it. Omit
+        // `servername` for IP targets so certificate verification falls back to
+        // the `host`/`authorized` check, which still covers the certificate.
+        const sni = options.servername ?? target.hostname;
         const secure = tls.connect({
             socket: baseSocket,
-            servername: options.servername ?? target.hostname,
+            ...(sni !== undefined && !isIpLiteral(sni) ? { servername: sni } : {}),
             ...(options.ca !== undefined ? { ca: options.ca } : {}),
         }, 
         // `rejectUnauthorized` is left at its default (true), so a peer that
@@ -372,7 +389,7 @@ async function openTlsSocket(tls, opts, timeoutMs, signal, errMeta, what) {
         const socket = tls.connect({
             host: opts.host,
             port: opts.port,
-            servername: opts.servername,
+            ...(isIpLiteral(opts.servername) ? {} : { servername: opts.servername }),
             ...(opts.ca !== undefined ? { ca: opts.ca } : {}),
         }, () => {
             cleanup();