logixia 2.0.6 → 2.0.8

package/dist/internal-log-Bg4V1cPg.mjs

@@ -1,170 +0,0 @@
-// src/utils/sensitive-names.ts
-/**
-* The one list of sensitive names. Log redaction (redact.utils), the HTTP logger
-* middleware and transport secret handling (transports/secret-config) all read it,
-* so the lists cannot drift. No imports: safe from any module, including browser code.
-*/
-/** Field names redacted by name, wherever they appear in logged data. */
-const SENSITIVE_KEY_NAMES = [
-	"password",
-	"passwd",
-	"secret",
-	"token",
-	"apiKey",
-	"api_key",
-	"accessToken",
-	"access_token",
-	"refreshToken",
-	"refresh_token",
-	"authorization",
-	"credentials",
-	"privateKey",
-	"private_key",
-	"clientSecret",
-	"client_secret",
-	"cookie",
-	"set-cookie",
-	"x-api-key",
-	"session",
-	"proxy-authorization",
-	"x-auth-token",
-	"x-access-token",
-	"aws_secret_access_key",
-	"awsSecretAccessKey",
-	"secretAccessKey"
-];
-/**
-* Extra names that only mean "secret" inside transport configuration, where
-* short words like `key` or `signature` are credentials, not log fields.
-*/
-const TRANSPORT_CONFIG_SECRET_NAMES = [
-	"writeKey",
-	"apiSecret",
-	"connectionString",
-	"sessionToken",
-	"passphrase",
-	"signature",
-	"pwd",
-	"pfx",
-	"cert",
-	"key",
-	"auth"
-];
-/** Request headers whose values are never logged. */
-const DEFAULT_REDACT_HEADERS = [
-	"authorization",
-	"cookie",
-	"set-cookie",
-	"x-api-key",
-	"proxy-authorization",
-	"x-auth-token",
-	"x-access-token",
-	"x-csrf-token",
-	"x-amz-security-token"
-];
-/** Query-string parameters whose values are never logged. */
-const DEFAULT_REDACT_QUERY_PARAMS = [
-	"token",
-	"access_token",
-	"refresh_token",
-	"code",
-	"password",
-	"secret",
-	"api_key",
-	"apikey",
-	"key",
-	"signature",
-	"sig",
-	"auth"
-];
-function safeDecode(value) {
-	try {
-		return decodeURIComponent(value.replace(/\+/g, " "));
-	} catch {
-		return value;
-	}
-}
-/** Replace the values of sensitive query parameters, leaving the rest verbatim. */
-function redactUrlQuery(url, redactParams) {
-	const q = url.indexOf("?");
-	if (q === -1) return url;
-	const hashAt = url.indexOf("#", q);
-	const query = url.slice(q + 1, hashAt === -1 ? void 0 : hashAt);
-	const hash = hashAt === -1 ? "" : url.slice(hashAt);
-	const cleaned = query.split("&").map((pair) => {
-		const eq = pair.indexOf("=");
-		const rawKey = eq === -1 ? pair : pair.slice(0, eq);
-		const decoded = safeDecode(rawKey);
-		const bracket = decoded.indexOf("[");
-		const name = (bracket === -1 ? decoded : decoded.slice(0, bracket)).toLowerCase();
-		return redactParams.has(name) && eq !== -1 ? `${rawKey}=[REDACTED]` : pair;
-	}).join("&");
-	return `${url.slice(0, q)}?${cleaned}${hash}`;
-}
-/** Lower-cased lookup set of the default names plus any extras. */
-function buildNameSet(defaults, extra) {
-	return new Set([...defaults, ...extra ?? []].map((n) => n.toLowerCase()));
-}
-// src/utils/internal-log.ts
-/**
-* Internal logging helpers for use within the logixia library itself.
-*
-* These functions write directly to stderr/stdout without going through
-* LogixiaLogger — this avoids circular dependencies and ensures internal
-* diagnostics still surface even when the logger is misconfigured.
-*
-* Library code must NEVER call console.log/warn/error directly. Use these
-* helpers instead so that internal output can be silenced in tests by setting
-* the LOGIXIA_SILENT_INTERNAL=1 environment variable.
-*/
-/**
-* Read the silence flag on each call rather than caching it at import time, so
-* setting LOGIXIA_SILENT_INTERNAL=1 AFTER the module is first imported (e.g. in
-* a test setup file) still takes effect — the documented test-silencing
-* behavior was previously unreliable because the value was frozen at load.
-*/
-function isSilent() {
-	var _process$env;
-	if (typeof process !== "undefined" && ((_process$env = process.env) === null || _process$env === void 0 ? void 0 : _process$env.LOGIXIA_SILENT_INTERNAL) === "1") return true;
-	const flag = globalThis["LOGIXIA_SILENT_INTERNAL"];
-	return flag === "1" || flag === 1 || flag === true;
-}
-/**
-* Write a line to stderr, falling back to the matching console method where
-* `process` is unavailable (browsers, Cloudflare Workers, Deno without Node compat).
-*/
-function writeLine(method, line) {
-	var _process$stderr;
-	if (typeof process !== "undefined" && typeof ((_process$stderr = process.stderr) === null || _process$stderr === void 0 ? void 0 : _process$stderr.write) === "function") process.stderr.write(`${line}\n`);
-	else if (typeof console !== "undefined" && typeof console[method] === "function") console[method](line);
-}
-/**
-* Emit an internal debug/info message to stderr.
-* Use for field-enable/disable notifications that a developer might want to see
-* during development but should not appear in production log streams.
-*/
-function internalLog(message) {
-	if (!isSilent()) writeLine("log", `[logixia] ${message}`);
-}
-/**
-* Emit an internal warning to stderr.
-* Use when something is misconfigured but logixia can continue operating.
-*/
-function internalWarn(message) {
-	if (!isSilent()) writeLine("warn", `[logixia:warn] ${message}`);
-}
-/**
-* Emit an internal error to stderr.
-* Use when a transport write fails or a serious internal error occurs.
-*/
-function internalError(message, error) {
-	if (!isSilent()) {
-		let errStr = "";
-		if (error instanceof Error) errStr = ` — ${error.message}`;
-		else if (error != null) errStr = ` — ${String(error)}`;
-		writeLine("error", `[logixia:error] ${message}${errStr}`);
-	}
-}
-export { DEFAULT_REDACT_QUERY_PARAMS as a, buildNameSet as c, DEFAULT_REDACT_HEADERS as i, redactUrlQuery as l, internalLog as n, SENSITIVE_KEY_NAMES as o, internalWarn as r, TRANSPORT_CONFIG_SECRET_NAMES as s, internalError as t };
-
-//# sourceMappingURL=internal-log-Bg4V1cPg.mjs.map

package/dist/internal-log-Bg4V1cPg.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"internal-log-Bg4V1cPg.mjs","names":[],"sources":["../src/utils/sensitive-names.ts","../src/utils/internal-log.ts"],"sourcesContent":["/**\n * The one list of sensitive names. Log redaction (redact.utils), the HTTP logger\n * middleware and transport secret handling (transports/secret-config) all read it,\n * so the lists cannot drift. No imports: safe from any module, including browser code.\n */\n\n/** Field names redacted by name, wherever they appear in logged data. */\nexport const SENSITIVE_KEY_NAMES: readonly string[] = [\n  'password',\n  'passwd',\n  'secret',\n  'token',\n  'apiKey',\n  'api_key',\n  'accessToken',\n  'access_token',\n  'refreshToken',\n  'refresh_token',\n  'authorization',\n  'credentials',\n  'privateKey',\n  'private_key',\n  'clientSecret',\n  'client_secret',\n  'cookie',\n  'set-cookie',\n  'x-api-key',\n  'session',\n  'proxy-authorization',\n  'x-auth-token',\n  'x-access-token',\n  'aws_secret_access_key',\n  'awsSecretAccessKey',\n  'secretAccessKey',\n];\n\n/**\n * Extra names that only mean \"secret\" inside transport configuration, where\n * short words like `key` or `signature` are credentials, not log fields.\n */\nexport const TRANSPORT_CONFIG_SECRET_NAMES: readonly string[] = [\n  'writeKey',\n  'apiSecret',\n  'connectionString',\n  'sessionToken',\n  'passphrase',\n  'signature',\n  'pwd',\n  'pfx',\n  'cert',\n  'key',\n  'auth',\n];\n\n/** Request headers whose values are never logged. */\nexport const DEFAULT_REDACT_HEADERS: readonly string[] = [\n  'authorization',\n  'cookie',\n  'set-cookie',\n  'x-api-key',\n  'proxy-authorization',\n  'x-auth-token',\n  'x-access-token',\n  'x-csrf-token',\n  'x-amz-security-token',\n];\n\n/** Query-string parameters whose values are never logged. */\nexport const DEFAULT_REDACT_QUERY_PARAMS: readonly string[] = [\n  'token',\n  'access_token',\n  'refresh_token',\n  'code',\n  'password',\n  'secret',\n  'api_key',\n  'apikey',\n  'key',\n  'signature',\n  'sig',\n  'auth',\n];\n\nfunction safeDecode(value: string): string {\n  try {\n    return decodeURIComponent(value.replace(/\\+/g, ' '));\n  } catch {\n    return value;\n  }\n}\n\n/** Replace the values of sensitive query parameters, leaving the rest verbatim. */\nexport function redactUrlQuery(url: string, redactParams: ReadonlySet<string>): string {\n  const q = url.indexOf('?');\n  if (q === -1) return url;\n  const hashAt = url.indexOf('#', q);\n  const query = url.slice(q + 1, hashAt === -1 ? undefined : hashAt);\n  const hash = hashAt === -1 ? '' : url.slice(hashAt);\n  const cleaned = query\n    .split('&')\n    .map((pair) => {\n      const eq = pair.indexOf('=');\n      const rawKey = eq === -1 ? pair : pair.slice(0, eq);\n      const decoded = safeDecode(rawKey);\n      const bracket = decoded.indexOf('[');\n      const name = (bracket === -1 ? decoded : decoded.slice(0, bracket)).toLowerCase();\n      return redactParams.has(name) && eq !== -1 ? `${rawKey}=[REDACTED]` : pair;\n    })\n    .join('&');\n  return `${url.slice(0, q)}?${cleaned}${hash}`;\n}\n\n/** Lower-cased lookup set of the default names plus any extras. */\nexport function buildNameSet(\n  defaults: readonly string[],\n  extra: readonly string[] | undefined\n): Set<string> {\n  return new Set([...defaults, ...(extra ?? [])].map((n) => n.toLowerCase()));\n}\n","/**\n * Internal logging helpers for use within the logixia library itself.\n *\n * These functions write directly to stderr/stdout without going through\n * LogixiaLogger — this avoids circular dependencies and ensures internal\n * diagnostics still surface even when the logger is misconfigured.\n *\n * Library code must NEVER call console.log/warn/error directly. Use these\n * helpers instead so that internal output can be silenced in tests by setting\n * the LOGIXIA_SILENT_INTERNAL=1 environment variable.\n */\n\n/**\n * Read the silence flag on each call rather than caching it at import time, so\n * setting LOGIXIA_SILENT_INTERNAL=1 AFTER the module is first imported (e.g. in\n * a test setup file) still takes effect — the documented test-silencing\n * behavior was previously unreliable because the value was frozen at load.\n */\nfunction isSilent(): boolean {\n  if (typeof process !== 'undefined' && process.env?.LOGIXIA_SILENT_INTERNAL === '1') return true;\n  const flag = (globalThis as Record<string, unknown>)['LOGIXIA_SILENT_INTERNAL'];\n  return flag === '1' || flag === 1 || flag === true;\n}\n\ntype ConsoleMethod = 'log' | 'warn' | 'error';\n\n/**\n * Write a line to stderr, falling back to the matching console method where\n * `process` is unavailable (browsers, Cloudflare Workers, Deno without Node compat).\n */\nfunction writeLine(method: ConsoleMethod, line: string): void {\n  if (typeof process !== 'undefined' && typeof process.stderr?.write === 'function') {\n    process.stderr.write(`${line}\\n`);\n  } else if (typeof console !== 'undefined' && typeof console[method] === 'function') {\n    console[method](line);\n  }\n}\n\n/**\n * Emit an internal debug/info message to stderr.\n * Use for field-enable/disable notifications that a developer might want to see\n * during development but should not appear in production log streams.\n */\nexport function internalLog(message: string): void {\n  if (!isSilent()) {\n    writeLine('log', `[logixia] ${message}`);\n  }\n}\n\n/**\n * Emit an internal warning to stderr.\n * Use when something is misconfigured but logixia can continue operating.\n */\nexport function internalWarn(message: string): void {\n  if (!isSilent()) {\n    writeLine('warn', `[logixia:warn] ${message}`);\n  }\n}\n\n/**\n * Emit an internal error to stderr.\n * Use when a transport write fails or a serious internal error occurs.\n */\nexport function internalError(message: string, error?: unknown): void {\n  if (!isSilent()) {\n    let errStr = '';\n    if (error instanceof Error) {\n      errStr = ` — ${error.message}`;\n    } else if (error != null) {\n      errStr = ` — ${String(error)}`;\n    }\n    writeLine('error', `[logixia:error] ${message}${errStr}`);\n  }\n}\n"],"mappings":";;;;;;;AAOA,MAAa,sBAAyC;CACpD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;;AAMA,MAAa,gCAAmD;CAC9D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,8BAAiD;CAC5D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI;EACF,OAAO,mBAAmB,MAAM,QAAQ,OAAO,GAAG,CAAC;CACrD,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,eAAe,KAAa,cAA2C;CACrF,MAAM,IAAI,IAAI,QAAQ,GAAG;CACzB,IAAI,MAAM,IAAI,OAAO;CACrB,MAAM,SAAS,IAAI,QAAQ,KAAK,CAAC;CACjC,MAAM,QAAQ,IAAI,MAAM,IAAI,GAAG,WAAW,KAAK,KAAA,IAAY,MAAM;CACjE,MAAM,OAAO,WAAW,KAAK,KAAK,IAAI,MAAM,MAAM;CAClD,MAAM,UAAU,MACb,MAAM,GAAG,CAAC,CACV,KAAK,SAAS;EACb,MAAM,KAAK,KAAK,QAAQ,GAAG;EAC3B,MAAM,SAAS,OAAO,KAAK,OAAO,KAAK,MAAM,GAAG,EAAE;EAClD,MAAM,UAAU,WAAW,MAAM;EACjC,MAAM,UAAU,QAAQ,QAAQ,GAAG;EACnC,MAAM,QAAQ,YAAY,KAAK,UAAU,QAAQ,MAAM,GAAG,OAAO,EAAA,CAAG,YAAY;EAChF,OAAO,aAAa,IAAI,IAAI,KAAK,OAAO,KAAK,GAAG,OAAO,eAAe;CACxE,CAAC,CAAC,CACD,KAAK,GAAG;CACX,OAAO,GAAG,IAAI,MAAM,GAAG,CAAC,EAAE,GAAG,UAAU;AACzC;;AAGA,SAAgB,aACd,UACA,OACa;CACb,OAAO,IAAI,IAAI,CAAC,GAAG,UAAU,GAAI,SAAS,CAAC,CAAE,CAAC,CAAC,KAAK,MAAM,EAAE,YAAY,CAAC,CAAC;AAC5E;;;;;;;;;;;;;;;;;;;ACpGA,SAAS,WAAoB;;CAC3B,IAAI,OAAO,YAAY,iBAAA,eAAe,QAAQ,SAAA,QAAA,iBAAA,KAAA,IAAA,KAAA,IAAA,aAAK,6BAA4B,KAAK,OAAO;CAC3F,MAAM,OAAQ,WAAuC;CACrD,OAAO,SAAS,OAAO,SAAS,KAAK,SAAS;AAChD;;;;;AAQA,SAAS,UAAU,QAAuB,MAAoB;;CAC5D,IAAI,OAAO,YAAY,eAAe,SAAA,kBAAO,QAAQ,YAAA,QAAA,oBAAA,KAAA,IAAA,KAAA,IAAA,gBAAQ,WAAU,YACrE,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG;MAC3B,IAAI,OAAO,YAAY,eAAe,OAAO,QAAQ,YAAY,YACtE,QAAQ,OAAO,CAAC,IAAI;AAExB;;;;;;AAOA,SAAgB,YAAY,SAAuB;CACjD,IAAI,CAAC,SAAS,GACZ,UAAU,OAAO,aAAa,SAAS;AAE3C;;;;;AAMA,SAAgB,aAAa,SAAuB;CAClD,IAAI,CAAC,SAAS,GACZ,UAAU,QAAQ,kBAAkB,SAAS;AAEjD;;;;;AAMA,SAAgB,cAAc,SAAiB,OAAuB;CACpE,IAAI,CAAC,SAAS,GAAG;EACf,IAAI,SAAS;EACb,IAAI,iBAAiB,OACnB,SAAS,MAAM,MAAM;OAChB,IAAI,SAAS,MAClB,SAAS,MAAM,OAAO,KAAK;EAE7B,UAAU,SAAS,mBAAmB,UAAU,QAAQ;CAC1D;AACF"}

package/dist/internal-log-By4Govmu.js

@@ -1,223 +0,0 @@
-// src/utils/sensitive-names.ts
-/**
-* The one list of sensitive names. Log redaction (redact.utils), the HTTP logger
-* middleware and transport secret handling (transports/secret-config) all read it,
-* so the lists cannot drift. No imports: safe from any module, including browser code.
-*/
-/** Field names redacted by name, wherever they appear in logged data. */
-const SENSITIVE_KEY_NAMES = [
-	"password",
-	"passwd",
-	"secret",
-	"token",
-	"apiKey",
-	"api_key",
-	"accessToken",
-	"access_token",
-	"refreshToken",
-	"refresh_token",
-	"authorization",
-	"credentials",
-	"privateKey",
-	"private_key",
-	"clientSecret",
-	"client_secret",
-	"cookie",
-	"set-cookie",
-	"x-api-key",
-	"session",
-	"proxy-authorization",
-	"x-auth-token",
-	"x-access-token",
-	"aws_secret_access_key",
-	"awsSecretAccessKey",
-	"secretAccessKey"
-];
-/**
-* Extra names that only mean "secret" inside transport configuration, where
-* short words like `key` or `signature` are credentials, not log fields.
-*/
-const TRANSPORT_CONFIG_SECRET_NAMES = [
-	"writeKey",
-	"apiSecret",
-	"connectionString",
-	"sessionToken",
-	"passphrase",
-	"signature",
-	"pwd",
-	"pfx",
-	"cert",
-	"key",
-	"auth"
-];
-/** Request headers whose values are never logged. */
-const DEFAULT_REDACT_HEADERS = [
-	"authorization",
-	"cookie",
-	"set-cookie",
-	"x-api-key",
-	"proxy-authorization",
-	"x-auth-token",
-	"x-access-token",
-	"x-csrf-token",
-	"x-amz-security-token"
-];
-/** Query-string parameters whose values are never logged. */
-const DEFAULT_REDACT_QUERY_PARAMS = [
-	"token",
-	"access_token",
-	"refresh_token",
-	"code",
-	"password",
-	"secret",
-	"api_key",
-	"apikey",
-	"key",
-	"signature",
-	"sig",
-	"auth"
-];
-function safeDecode(value) {
-	try {
-		return decodeURIComponent(value.replace(/\+/g, " "));
-	} catch {
-		return value;
-	}
-}
-/** Replace the values of sensitive query parameters, leaving the rest verbatim. */
-function redactUrlQuery(url, redactParams) {
-	const q = url.indexOf("?");
-	if (q === -1) return url;
-	const hashAt = url.indexOf("#", q);
-	const query = url.slice(q + 1, hashAt === -1 ? void 0 : hashAt);
-	const hash = hashAt === -1 ? "" : url.slice(hashAt);
-	const cleaned = query.split("&").map((pair) => {
-		const eq = pair.indexOf("=");
-		const rawKey = eq === -1 ? pair : pair.slice(0, eq);
-		const decoded = safeDecode(rawKey);
-		const bracket = decoded.indexOf("[");
-		const name = (bracket === -1 ? decoded : decoded.slice(0, bracket)).toLowerCase();
-		return redactParams.has(name) && eq !== -1 ? `${rawKey}=[REDACTED]` : pair;
-	}).join("&");
-	return `${url.slice(0, q)}?${cleaned}${hash}`;
-}
-/** Lower-cased lookup set of the default names plus any extras. */
-function buildNameSet(defaults, extra) {
-	return new Set([...defaults, ...extra ?? []].map((n) => n.toLowerCase()));
-}
-// src/utils/internal-log.ts
-/**
-* Internal logging helpers for use within the logixia library itself.
-*
-* These functions write directly to stderr/stdout without going through
-* LogixiaLogger — this avoids circular dependencies and ensures internal
-* diagnostics still surface even when the logger is misconfigured.
-*
-* Library code must NEVER call console.log/warn/error directly. Use these
-* helpers instead so that internal output can be silenced in tests by setting
-* the LOGIXIA_SILENT_INTERNAL=1 environment variable.
-*/
-/**
-* Read the silence flag on each call rather than caching it at import time, so
-* setting LOGIXIA_SILENT_INTERNAL=1 AFTER the module is first imported (e.g. in
-* a test setup file) still takes effect — the documented test-silencing
-* behavior was previously unreliable because the value was frozen at load.
-*/
-function isSilent() {
-	var _process$env;
-	if (typeof process !== "undefined" && ((_process$env = process.env) === null || _process$env === void 0 ? void 0 : _process$env.LOGIXIA_SILENT_INTERNAL) === "1") return true;
-	const flag = globalThis["LOGIXIA_SILENT_INTERNAL"];
-	return flag === "1" || flag === 1 || flag === true;
-}
-/**
-* Write a line to stderr, falling back to the matching console method where
-* `process` is unavailable (browsers, Cloudflare Workers, Deno without Node compat).
-*/
-function writeLine(method, line) {
-	var _process$stderr;
-	if (typeof process !== "undefined" && typeof ((_process$stderr = process.stderr) === null || _process$stderr === void 0 ? void 0 : _process$stderr.write) === "function") process.stderr.write(`${line}\n`);
-	else if (typeof console !== "undefined" && typeof console[method] === "function") console[method](line);
-}
-/**
-* Emit an internal debug/info message to stderr.
-* Use for field-enable/disable notifications that a developer might want to see
-* during development but should not appear in production log streams.
-*/
-function internalLog(message) {
-	if (!isSilent()) writeLine("log", `[logixia] ${message}`);
-}
-/**
-* Emit an internal warning to stderr.
-* Use when something is misconfigured but logixia can continue operating.
-*/
-function internalWarn(message) {
-	if (!isSilent()) writeLine("warn", `[logixia:warn] ${message}`);
-}
-/**
-* Emit an internal error to stderr.
-* Use when a transport write fails or a serious internal error occurs.
-*/
-function internalError(message, error) {
-	if (!isSilent()) {
-		let errStr = "";
-		if (error instanceof Error) errStr = ` — ${error.message}`;
-		else if (error != null) errStr = ` — ${String(error)}`;
-		writeLine("error", `[logixia:error] ${message}${errStr}`);
-	}
-}
-Object.defineProperty(exports, "DEFAULT_REDACT_HEADERS", {
-	enumerable: true,
-	get: function() {
-		return DEFAULT_REDACT_HEADERS;
-	}
-});
-Object.defineProperty(exports, "DEFAULT_REDACT_QUERY_PARAMS", {
-	enumerable: true,
-	get: function() {
-		return DEFAULT_REDACT_QUERY_PARAMS;
-	}
-});
-Object.defineProperty(exports, "SENSITIVE_KEY_NAMES", {
-	enumerable: true,
-	get: function() {
-		return SENSITIVE_KEY_NAMES;
-	}
-});
-Object.defineProperty(exports, "TRANSPORT_CONFIG_SECRET_NAMES", {
-	enumerable: true,
-	get: function() {
-		return TRANSPORT_CONFIG_SECRET_NAMES;
-	}
-});
-Object.defineProperty(exports, "buildNameSet", {
-	enumerable: true,
-	get: function() {
-		return buildNameSet;
-	}
-});
-Object.defineProperty(exports, "internalError", {
-	enumerable: true,
-	get: function() {
-		return internalError;
-	}
-});
-Object.defineProperty(exports, "internalLog", {
-	enumerable: true,
-	get: function() {
-		return internalLog;
-	}
-});
-Object.defineProperty(exports, "internalWarn", {
-	enumerable: true,
-	get: function() {
-		return internalWarn;
-	}
-});
-Object.defineProperty(exports, "redactUrlQuery", {
-	enumerable: true,
-	get: function() {
-		return redactUrlQuery;
-	}
-});
-
-//# sourceMappingURL=internal-log-By4Govmu.js.map

package/dist/internal-log-By4Govmu.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"internal-log-By4Govmu.js","names":[],"sources":["../src/utils/sensitive-names.ts","../src/utils/internal-log.ts"],"sourcesContent":["/**\n * The one list of sensitive names. Log redaction (redact.utils), the HTTP logger\n * middleware and transport secret handling (transports/secret-config) all read it,\n * so the lists cannot drift. No imports: safe from any module, including browser code.\n */\n\n/** Field names redacted by name, wherever they appear in logged data. */\nexport const SENSITIVE_KEY_NAMES: readonly string[] = [\n  'password',\n  'passwd',\n  'secret',\n  'token',\n  'apiKey',\n  'api_key',\n  'accessToken',\n  'access_token',\n  'refreshToken',\n  'refresh_token',\n  'authorization',\n  'credentials',\n  'privateKey',\n  'private_key',\n  'clientSecret',\n  'client_secret',\n  'cookie',\n  'set-cookie',\n  'x-api-key',\n  'session',\n  'proxy-authorization',\n  'x-auth-token',\n  'x-access-token',\n  'aws_secret_access_key',\n  'awsSecretAccessKey',\n  'secretAccessKey',\n];\n\n/**\n * Extra names that only mean \"secret\" inside transport configuration, where\n * short words like `key` or `signature` are credentials, not log fields.\n */\nexport const TRANSPORT_CONFIG_SECRET_NAMES: readonly string[] = [\n  'writeKey',\n  'apiSecret',\n  'connectionString',\n  'sessionToken',\n  'passphrase',\n  'signature',\n  'pwd',\n  'pfx',\n  'cert',\n  'key',\n  'auth',\n];\n\n/** Request headers whose values are never logged. */\nexport const DEFAULT_REDACT_HEADERS: readonly string[] = [\n  'authorization',\n  'cookie',\n  'set-cookie',\n  'x-api-key',\n  'proxy-authorization',\n  'x-auth-token',\n  'x-access-token',\n  'x-csrf-token',\n  'x-amz-security-token',\n];\n\n/** Query-string parameters whose values are never logged. */\nexport const DEFAULT_REDACT_QUERY_PARAMS: readonly string[] = [\n  'token',\n  'access_token',\n  'refresh_token',\n  'code',\n  'password',\n  'secret',\n  'api_key',\n  'apikey',\n  'key',\n  'signature',\n  'sig',\n  'auth',\n];\n\nfunction safeDecode(value: string): string {\n  try {\n    return decodeURIComponent(value.replace(/\\+/g, ' '));\n  } catch {\n    return value;\n  }\n}\n\n/** Replace the values of sensitive query parameters, leaving the rest verbatim. */\nexport function redactUrlQuery(url: string, redactParams: ReadonlySet<string>): string {\n  const q = url.indexOf('?');\n  if (q === -1) return url;\n  const hashAt = url.indexOf('#', q);\n  const query = url.slice(q + 1, hashAt === -1 ? undefined : hashAt);\n  const hash = hashAt === -1 ? '' : url.slice(hashAt);\n  const cleaned = query\n    .split('&')\n    .map((pair) => {\n      const eq = pair.indexOf('=');\n      const rawKey = eq === -1 ? pair : pair.slice(0, eq);\n      const decoded = safeDecode(rawKey);\n      const bracket = decoded.indexOf('[');\n      const name = (bracket === -1 ? decoded : decoded.slice(0, bracket)).toLowerCase();\n      return redactParams.has(name) && eq !== -1 ? `${rawKey}=[REDACTED]` : pair;\n    })\n    .join('&');\n  return `${url.slice(0, q)}?${cleaned}${hash}`;\n}\n\n/** Lower-cased lookup set of the default names plus any extras. */\nexport function buildNameSet(\n  defaults: readonly string[],\n  extra: readonly string[] | undefined\n): Set<string> {\n  return new Set([...defaults, ...(extra ?? [])].map((n) => n.toLowerCase()));\n}\n","/**\n * Internal logging helpers for use within the logixia library itself.\n *\n * These functions write directly to stderr/stdout without going through\n * LogixiaLogger — this avoids circular dependencies and ensures internal\n * diagnostics still surface even when the logger is misconfigured.\n *\n * Library code must NEVER call console.log/warn/error directly. Use these\n * helpers instead so that internal output can be silenced in tests by setting\n * the LOGIXIA_SILENT_INTERNAL=1 environment variable.\n */\n\n/**\n * Read the silence flag on each call rather than caching it at import time, so\n * setting LOGIXIA_SILENT_INTERNAL=1 AFTER the module is first imported (e.g. in\n * a test setup file) still takes effect — the documented test-silencing\n * behavior was previously unreliable because the value was frozen at load.\n */\nfunction isSilent(): boolean {\n  if (typeof process !== 'undefined' && process.env?.LOGIXIA_SILENT_INTERNAL === '1') return true;\n  const flag = (globalThis as Record<string, unknown>)['LOGIXIA_SILENT_INTERNAL'];\n  return flag === '1' || flag === 1 || flag === true;\n}\n\ntype ConsoleMethod = 'log' | 'warn' | 'error';\n\n/**\n * Write a line to stderr, falling back to the matching console method where\n * `process` is unavailable (browsers, Cloudflare Workers, Deno without Node compat).\n */\nfunction writeLine(method: ConsoleMethod, line: string): void {\n  if (typeof process !== 'undefined' && typeof process.stderr?.write === 'function') {\n    process.stderr.write(`${line}\\n`);\n  } else if (typeof console !== 'undefined' && typeof console[method] === 'function') {\n    console[method](line);\n  }\n}\n\n/**\n * Emit an internal debug/info message to stderr.\n * Use for field-enable/disable notifications that a developer might want to see\n * during development but should not appear in production log streams.\n */\nexport function internalLog(message: string): void {\n  if (!isSilent()) {\n    writeLine('log', `[logixia] ${message}`);\n  }\n}\n\n/**\n * Emit an internal warning to stderr.\n * Use when something is misconfigured but logixia can continue operating.\n */\nexport function internalWarn(message: string): void {\n  if (!isSilent()) {\n    writeLine('warn', `[logixia:warn] ${message}`);\n  }\n}\n\n/**\n * Emit an internal error to stderr.\n * Use when a transport write fails or a serious internal error occurs.\n */\nexport function internalError(message: string, error?: unknown): void {\n  if (!isSilent()) {\n    let errStr = '';\n    if (error instanceof Error) {\n      errStr = ` — ${error.message}`;\n    } else if (error != null) {\n      errStr = ` — ${String(error)}`;\n    }\n    writeLine('error', `[logixia:error] ${message}${errStr}`);\n  }\n}\n"],"mappings":";;;;;;;AAOA,MAAa,sBAAyC;CACpD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;;AAMA,MAAa,gCAAmD;CAC9D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,8BAAiD;CAC5D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI;EACF,OAAO,mBAAmB,MAAM,QAAQ,OAAO,GAAG,CAAC;CACrD,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,eAAe,KAAa,cAA2C;CACrF,MAAM,IAAI,IAAI,QAAQ,GAAG;CACzB,IAAI,MAAM,IAAI,OAAO;CACrB,MAAM,SAAS,IAAI,QAAQ,KAAK,CAAC;CACjC,MAAM,QAAQ,IAAI,MAAM,IAAI,GAAG,WAAW,KAAK,KAAA,IAAY,MAAM;CACjE,MAAM,OAAO,WAAW,KAAK,KAAK,IAAI,MAAM,MAAM;CAClD,MAAM,UAAU,MACb,MAAM,GAAG,CAAC,CACV,KAAK,SAAS;EACb,MAAM,KAAK,KAAK,QAAQ,GAAG;EAC3B,MAAM,SAAS,OAAO,KAAK,OAAO,KAAK,MAAM,GAAG,EAAE;EAClD,MAAM,UAAU,WAAW,MAAM;EACjC,MAAM,UAAU,QAAQ,QAAQ,GAAG;EACnC,MAAM,QAAQ,YAAY,KAAK,UAAU,QAAQ,MAAM,GAAG,OAAO,EAAA,CAAG,YAAY;EAChF,OAAO,aAAa,IAAI,IAAI,KAAK,OAAO,KAAK,GAAG,OAAO,eAAe;CACxE,CAAC,CAAC,CACD,KAAK,GAAG;CACX,OAAO,GAAG,IAAI,MAAM,GAAG,CAAC,EAAE,GAAG,UAAU;AACzC;;AAGA,SAAgB,aACd,UACA,OACa;CACb,OAAO,IAAI,IAAI,CAAC,GAAG,UAAU,GAAI,SAAS,CAAC,CAAE,CAAC,CAAC,KAAK,MAAM,EAAE,YAAY,CAAC,CAAC;AAC5E;;;;;;;;;;;;;;;;;;;ACpGA,SAAS,WAAoB;;CAC3B,IAAI,OAAO,YAAY,iBAAA,eAAe,QAAQ,SAAA,QAAA,iBAAA,KAAA,IAAA,KAAA,IAAA,aAAK,6BAA4B,KAAK,OAAO;CAC3F,MAAM,OAAQ,WAAuC;CACrD,OAAO,SAAS,OAAO,SAAS,KAAK,SAAS;AAChD;;;;;AAQA,SAAS,UAAU,QAAuB,MAAoB;;CAC5D,IAAI,OAAO,YAAY,eAAe,SAAA,kBAAO,QAAQ,YAAA,QAAA,oBAAA,KAAA,IAAA,KAAA,IAAA,gBAAQ,WAAU,YACrE,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG;MAC3B,IAAI,OAAO,YAAY,eAAe,OAAO,QAAQ,YAAY,YACtE,QAAQ,OAAO,CAAC,IAAI;AAExB;;;;;;AAOA,SAAgB,YAAY,SAAuB;CACjD,IAAI,CAAC,SAAS,GACZ,UAAU,OAAO,aAAa,SAAS;AAE3C;;;;;AAMA,SAAgB,aAAa,SAAuB;CAClD,IAAI,CAAC,SAAS,GACZ,UAAU,QAAQ,kBAAkB,SAAS;AAEjD;;;;;AAMA,SAAgB,cAAc,SAAiB,OAAuB;CACpE,IAAI,CAAC,SAAS,GAAG;EACf,IAAI,SAAS;EACb,IAAI,iBAAiB,OACnB,SAAS,MAAM,MAAM;OAChB,IAAI,SAAS,MAClB,SAAS,MAAM,OAAO,KAAK;EAE7B,UAAU,SAAS,mBAAmB,UAAU,QAAQ;CAC1D;AACF"}

package/dist/own-property-BWkibepN.js

@@ -1,40 +0,0 @@
-// src/utils/own-property.ts
-/**
-* True for the one key that must never be assigned with `target[key] = value`.
-*
-* Assigning `constructor` or `prototype` on a fresh plain object only creates an
-* own property, which is harmless. Only `__proto__` invokes the prototype setter.
-*/
-function isProtoKey(key) {
-	return key === "__proto__";
-}
-/**
-* Copy `value` onto `target[key]` as an own, enumerable data property.
-*
-* Normal keys use a plain assignment, which is the fast path. `__proto__` goes
-* through `Object.defineProperty` so that a key taken from logged or parsed data
-* becomes an own property instead of replacing the object's prototype.
-*/
-function assignOwn(target, key, value) {
-	if (key === "__proto__") Object.defineProperty(target, key, {
-		value,
-		enumerable: true,
-		writable: true,
-		configurable: true
-	});
-	else target[key] = value;
-}
-Object.defineProperty(exports, "assignOwn", {
-	enumerable: true,
-	get: function() {
-		return assignOwn;
-	}
-});
-Object.defineProperty(exports, "isProtoKey", {
-	enumerable: true,
-	get: function() {
-		return isProtoKey;
-	}
-});
-
-//# sourceMappingURL=own-property-BWkibepN.js.map

package/dist/own-property-BWkibepN.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"own-property-BWkibepN.js","names":[],"sources":["../src/utils/own-property.ts"],"sourcesContent":["/**\n * True for the one key that must never be assigned with `target[key] = value`.\n *\n * Assigning `constructor` or `prototype` on a fresh plain object only creates an\n * own property, which is harmless. Only `__proto__` invokes the prototype setter.\n */\nexport function isProtoKey(key: string): boolean {\n  return key === '__proto__';\n}\n\n/**\n * Copy `value` onto `target[key]` as an own, enumerable data property.\n *\n * Normal keys use a plain assignment, which is the fast path. `__proto__` goes\n * through `Object.defineProperty` so that a key taken from logged or parsed data\n * becomes an own property instead of replacing the object's prototype.\n */\nexport function assignOwn(target: object, key: string, value: unknown): void {\n  if (key === '__proto__') {\n    Object.defineProperty(target, key, {\n      value,\n      enumerable: true,\n      writable: true,\n      configurable: true,\n    });\n  } else {\n    (target as Record<string, unknown>)[key] = value;\n  }\n}\n"],"mappings":";;;;;;;AAMA,SAAgB,WAAW,KAAsB;CAC/C,OAAO,QAAQ;AACjB;;;;;;;;AASA,SAAgB,UAAU,QAAgB,KAAa,OAAsB;CAC3E,IAAI,QAAQ,aACV,OAAO,eAAe,QAAQ,KAAK;EACjC;EACA,YAAY;EACZ,UAAU;EACV,cAAc;CAChB,CAAC;MAED,OAAoC,OAAO;AAE/C"}

package/dist/own-property-CjFw9qwZ.mjs

@@ -1,29 +0,0 @@
-// src/utils/own-property.ts
-/**
-* True for the one key that must never be assigned with `target[key] = value`.
-*
-* Assigning `constructor` or `prototype` on a fresh plain object only creates an
-* own property, which is harmless. Only `__proto__` invokes the prototype setter.
-*/
-function isProtoKey(key) {
-	return key === "__proto__";
-}
-/**
-* Copy `value` onto `target[key]` as an own, enumerable data property.
-*
-* Normal keys use a plain assignment, which is the fast path. `__proto__` goes
-* through `Object.defineProperty` so that a key taken from logged or parsed data
-* becomes an own property instead of replacing the object's prototype.
-*/
-function assignOwn(target, key, value) {
-	if (key === "__proto__") Object.defineProperty(target, key, {
-		value,
-		enumerable: true,
-		writable: true,
-		configurable: true
-	});
-	else target[key] = value;
-}
-export { isProtoKey as n, assignOwn as t };
-
-//# sourceMappingURL=own-property-CjFw9qwZ.mjs.map

package/dist/own-property-CjFw9qwZ.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"own-property-CjFw9qwZ.mjs","names":[],"sources":["../src/utils/own-property.ts"],"sourcesContent":["/**\n * True for the one key that must never be assigned with `target[key] = value`.\n *\n * Assigning `constructor` or `prototype` on a fresh plain object only creates an\n * own property, which is harmless. Only `__proto__` invokes the prototype setter.\n */\nexport function isProtoKey(key: string): boolean {\n  return key === '__proto__';\n}\n\n/**\n * Copy `value` onto `target[key]` as an own, enumerable data property.\n *\n * Normal keys use a plain assignment, which is the fast path. `__proto__` goes\n * through `Object.defineProperty` so that a key taken from logged or parsed data\n * becomes an own property instead of replacing the object's prototype.\n */\nexport function assignOwn(target: object, key: string, value: unknown): void {\n  if (key === '__proto__') {\n    Object.defineProperty(target, key, {\n      value,\n      enumerable: true,\n      writable: true,\n      configurable: true,\n    });\n  } else {\n    (target as Record<string, unknown>)[key] = value;\n  }\n}\n"],"mappings":";;;;;;;AAMA,SAAgB,WAAW,KAAsB;CAC/C,OAAO,QAAQ;AACjB;;;;;;;;AASA,SAAgB,UAAU,QAAgB,KAAa,OAAsB;CAC3E,IAAI,QAAQ,aACV,OAAO,eAAe,QAAQ,KAAK;EACjC;EACA,YAAY;EACZ,UAAU;EACV,cAAc;CAChB,CAAC;MAED,OAAoC,OAAO;AAE/C"}