mandala-computer-mcp 0.4.0 → 0.6.0

package/dist/results.js

@@ -0,0 +1,263 @@
+import { APIError, CancelledError } from './errors.js';
+import { refused, withErrorMetadata } from './format.js';
+export const RETAINED_OPERATION_MS = 90000;
+export const PRESENTATION_DEFAULT = 4096, PRESENTATION_MAX = 16384, RETAINED_RESULT_MAX = 256 * 1024;
+export class RetainedValueError extends Error {
+    constructor() {
+        super('Invalid or unsupported retained response or request.');
+    }
+}
+export const record = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+export const integer = (v, min = 0, max = Number.MAX_SAFE_INTEGER) => Number.isSafeInteger(v) && v >= min && v <= max;
+export function requireValue(condition) {
+    if (!condition)
+        throw new RetainedValueError();
+}
+export const resultId = (v) => typeof v === 'string' && v.length === 36 && /^res_[a-f0-9]{32}$/.test(v);
+export const executionId = (v) => typeof v === 'string' && v.length === 37 && /^exec_[a-f0-9]{32}$/.test(v);
+export const scopeId = (v) => typeof v === 'string' && v.match(/^[A-Za-z0-9_-]{1,100}$/)?.[0] === v;
+export const digest = (v) => typeof v === 'string' && v.length === 64 && /^[a-f0-9]{64}$/.test(v);
+export function time(v) {
+    requireValue(typeof v === 'string' &&
+        v.endsWith('Z') &&
+        /^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d(?:\.\d{1,9})?Z$/.test(v));
+    const parsed = Date.parse(v);
+    requireValue(Number.isFinite(parsed) && new Date(parsed).toISOString().slice(0, 19) === v.slice(0, 19));
+    return (BigInt(Math.floor(parsed / 1000)) * 1000000000n +
+        BigInt((v.split('.')[1]?.slice(0, -1) ?? '').padEnd(9, '0')));
+}
+export function retainOptions(v) {
+    requireValue(record(v) &&
+        Object.keys(v).every((k) => k === 'max_bytes_per_stream' || k === 'retention_seconds'));
+    const out = {};
+    if ('max_bytes_per_stream' in v) {
+        requireValue(integer(v.max_bytes_per_stream, 1, 4 * 1024 * 1024));
+        out.max_bytes_per_stream = v.max_bytes_per_stream;
+    }
+    if ('retention_seconds' in v) {
+        requireValue(integer(v.retention_seconds, 1, 604800));
+        out.retention_seconds = v.retention_seconds;
+    }
+    return out;
+}
+export function retainIntent(v, background) {
+    if (v === undefined || v === false)
+        return undefined;
+    requireValue(!background);
+    return v === true ? true : retainOptions(v);
+}
+export function resultMetadata(v, computer, id, execution, options) {
+    requireValue(record(v) &&
+        v.version === 1 &&
+        resultId(v.result_id) &&
+        (!id || v.result_id === id) &&
+        v.computer_id === computer &&
+        scopeId(v.computer_id) &&
+        scopeId(v.account_id) &&
+        (v.workspace_id === null || scopeId(v.workspace_id)) &&
+        v.state === 'ready');
+    const sync = v.kind === 'synchronous-output';
+    requireValue(sync || v.kind === 'background-output');
+    requireValue(sync
+        ? v.execution_id === null && v.source === 'exec_response'
+        : executionId(v.execution_id) && v.source === 'volatile_guest_files');
+    if (execution)
+        requireValue(!sync && v.execution_id === execution);
+    const start = time(v.capture_started_at), end = time(v.captured_at), expires = time(v.expires_at);
+    requireValue(end >= start && expires > end && expires - start <= 604800000000000n);
+    const o = v.execution_observation;
+    requireValue(record(o));
+    const observed = time(o.observed_at);
+    requireValue(observed >= start && observed <= end);
+    requireValue(o.status === 'exited'
+        ? integer(o.exit_code, -2147483648, 2147483647)
+        : !sync && o.status === 'running' && !('exit_code' in o));
+    const observation = {
+        status: o.status,
+        observed_at: o.observed_at,
+        ...(o.status === 'exited' ? { exit_code: o.exit_code } : {}),
+    };
+    const prefix = (p) => {
+        requireValue(record(p) &&
+            integer(p.bytes, 0, 4 * 1024 * 1024) &&
+            digest(p.sha256) &&
+            p.source_offset === 0 &&
+            p.next_source_offset === p.bytes);
+        if (sync)
+            requireValue(integer(p.source_response_bytes, p.bytes, 16 * 1024 * 1024) &&
+                typeof p.upstream_truncated === 'boolean' &&
+                p.end_reason === (p.bytes === p.source_response_bytes ? 'response_end' : 'byte_limit'));
+        else
+            requireValue(p.end_reason === 'observed_eof' || p.end_reason === 'byte_limit');
+        return {
+            bytes: p.bytes,
+            sha256: p.sha256,
+            source_offset: 0,
+            next_source_offset: p.bytes,
+            end_reason: p.end_reason,
+            ...(sync
+                ? {
+                    source_response_bytes: p.source_response_bytes,
+                    upstream_truncated: p.upstream_truncated,
+                }
+                : {}),
+        };
+    };
+    let diagnostic = null;
+    if (sync)
+        requireValue(v.diagnostic === null);
+    else {
+        const d = v.diagnostic;
+        requireValue(record(d) &&
+            integer(d.bytes, 0, 65536) &&
+            digest(d.sha256) &&
+            d.source === 'wrapper' &&
+            typeof d.diagnostic_truncated === 'boolean');
+        diagnostic = {
+            bytes: d.bytes,
+            sha256: d.sha256,
+            source: 'wrapper',
+            diagnostic_truncated: d.diagnostic_truncated,
+        };
+    }
+    if (options) {
+        requireValue(record(v.stdout) &&
+            record(v.stderr) &&
+            integer(v.stdout.bytes, 0, options.max_bytes_per_stream ?? 1048576) &&
+            integer(v.stderr.bytes, 0, options.max_bytes_per_stream ?? 1048576) &&
+            expires - start <= BigInt(options.retention_seconds ?? 86400) * 1000000000n);
+    }
+    return {
+        version: 1,
+        result_id: v.result_id,
+        kind: v.kind,
+        state: 'ready',
+        account_id: v.account_id,
+        computer_id: v.computer_id,
+        workspace_id: v.workspace_id,
+        execution_id: v.execution_id,
+        source: v.source,
+        capture_started_at: v.capture_started_at,
+        captured_at: v.captured_at,
+        expires_at: v.expires_at,
+        execution_observation: observation,
+        stdout: prefix(v.stdout),
+        stderr: prefix(v.stderr),
+        diagnostic,
+    };
+}
+export function resultQuery(stream, offset, limit = PRESENTATION_DEFAULT) {
+    requireValue(['stdout', 'stderr', 'diagnostic'].includes(stream) &&
+        integer(offset) &&
+        integer(limit, 1, PRESENTATION_MAX) &&
+        Number.isSafeInteger(offset + limit));
+    return { stream: stream, offset, limit };
+}
+export function binaryContent(bytes) {
+    try {
+        const text = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes);
+        if (!bytes.some((byte) => byte === 127 || (byte < 32 && byte !== 9 && byte !== 10 && byte !== 13)) &&
+            Buffer.from(text, 'utf8').equals(Buffer.from(bytes)))
+            return { text };
+    }
+    catch {
+        /* exact binary follows */
+    }
+    return { base64: Buffer.from(bytes).toString('base64') };
+}
+export function resultPage(response, id, query) {
+    const h = response.headers, bytes = response.bytes;
+    const number = (name) => {
+        const raw = h[name];
+        requireValue(typeof raw === 'string' &&
+            /^(0|[1-9][0-9]*)$/.test(raw) &&
+            String(Number(raw)) === raw &&
+            integer(Number(raw)));
+        return Number(raw);
+    };
+    requireValue(h['content-type']?.split(';')[0].trim().toLowerCase() === 'application/octet-stream');
+    requireValue(number('content-length') === bytes.length &&
+        number('x-result-offset') === query.offset &&
+        number('x-result-next-offset') === query.offset + bytes.length &&
+        bytes.length <= query.limit);
+    requireValue(h['x-result-eof'] === 'true' || h['x-result-eof'] === 'false');
+    const eof = h['x-result-eof'] === 'true';
+    requireValue(eof || bytes.length === query.limit);
+    return {
+        result_id: id,
+        stream: query.stream,
+        offset: query.offset,
+        next_offset: query.offset + bytes.length,
+        eof,
+        bytes: bytes.length,
+        ...binaryContent(bytes),
+    };
+}
+/** One deadline for the whole callback, including metadata, bytes and presentation. */
+export async function retainedCall(parent, mutation, fn) {
+    const controller = new AbortController(), abort = () => controller.abort(parent.reason);
+    parent.addEventListener('abort', abort, { once: true });
+    if (parent.aborted)
+        abort();
+    const timer = setTimeout(() => controller.abort(), RETAINED_OPERATION_MS), signal = controller.signal, end = performance.now() + RETAINED_OPERATION_MS;
+    try {
+        if (signal.aborted)
+            throw new CancelledError('cancelled');
+        const result = await fn(signal);
+        if (signal.aborted || performance.now() >= end)
+            throw new CancelledError('cancelled');
+        requireValue(Buffer.byteLength(JSON.stringify(result)) <= RETAINED_RESULT_MAX);
+        if (signal.aborted || performance.now() >= end)
+            throw new CancelledError('cancelled');
+        return result;
+    }
+    catch (error) {
+        const suffix = mutation
+            ? ' Publication or deletion may have committed; its response is unconfirmed. Do not repeat a capture or command to recover this answer.'
+            : ' No fallback or command replay was attempted.';
+        if (signal.aborted || error instanceof CancelledError)
+            return refused(`Retained operation cancelled.${suffix}`);
+        if (error instanceof APIError)
+            return withErrorMetadata(refused(`Retained operation failed (HTTP ${error.status}). Current authorization, availability or server support could not be confirmed.${suffix}`), error);
+        return refused(`Retained operation could not be completed or validated.${suffix}`);
+    }
+    finally {
+        clearTimeout(timer);
+        parent.removeEventListener('abort', abort);
+        controller.abort();
+    }
+}
+/** Optional metadata must never change an already executed command's interpretation. */
+export function synchronousResultId(v, status) {
+    if (!record(v) ||
+        status !== 200 ||
+        !resultId(v.result_id) ||
+        v.timed_out !== false ||
+        !integer(v.exit_code, -2147483648, 2147483647) ||
+        typeof v.out_truncated !== 'boolean' ||
+        typeof v.err_truncated !== 'boolean')
+        return undefined;
+    for (const key of ['stdout_b64', 'stderr_b64']) {
+        const data = v[key];
+        if (typeof data !== 'string' || data.length > 22369624 || data.length % 4)
+            return undefined;
+        // Validate canonical padding without allocating the decoded large stream.
+        const alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/', pad = data.endsWith('==') ? 2 : data.endsWith('=') ? 1 : 0;
+        for (let i = 0; i < data.length - pad; i++) {
+            const c = data.charCodeAt(i);
+            if (!((c >= 65 && c <= 90) ||
+                (c >= 97 && c <= 122) ||
+                (c >= 48 && c <= 57) ||
+                c === 43 ||
+                c === 47))
+                return undefined;
+        }
+        if (pad &&
+            (data.length < 4 || alphabet.indexOf(data[data.length - pad - 1]) & (pad === 2 ? 15 : 3)))
+            return undefined;
+        if ((data.length / 4) * 3 - pad > 16 * 1024 * 1024)
+            return undefined;
+    }
+    return v.result_id;
+}
+//# sourceMappingURL=results.js.map

package/dist/results.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"results.js","sourceRoot":"","sources":["../src/results.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAC3C,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,EACtC,gBAAgB,GAAG,KAAK,EACxB,mBAAmB,GAAG,GAAG,GAAG,IAAI,CAAC;AACnC,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C;QACE,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAChE,CAAC;CACF;AACD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAU,EAAgC,EAAE,CACjE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,gBAAgB,EAAe,EAAE,CACzF,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAK,CAAY,IAAI,GAAG,IAAK,CAAY,IAAI,GAAG,CAAC;AAC1E,MAAM,UAAU,YAAY,CAAC,SAAkB;IAC7C,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;AACjD,CAAC;AACD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAe,EAAE,CAClD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAU,EAAe,EAAE,CACrD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAU,EAAe,EAAE,CACjD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACxE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAU,EAAe,EAAE,CAChD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvE,MAAM,UAAU,IAAI,CAAC,CAAU;IAC7B,YAAY,CACV,OAAO,CAAC,KAAK,QAAQ;QACnB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QACf,iDAAiD,CAAC,IAAI,CAAC,CAAC,CAAC,CAC5D,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,YAAY,CACV,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAC1F,CAAC;IACF,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,WAAW;QAC/C,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,YAAY,CACV,MAAM,CAAC,CAAC,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,sBAAsB,IAAI,CAAC,KAAK,mBAAmB,CAAC,CACzF,CAAC;IACF,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,IAAI,sBAAsB,IAAI,CAAC,EAAE,CAAC;QAChC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;QAClE,GAAG,CAAC,oBAAoB,GAAG,CAAC,CAAC,oBAAoB,CAAC;IACpD,CAAC;IACD,IAAI,mBAAmB,IAAI,CAAC,EAAE,CAAC;QAC7B,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,CAAU,EAAE,UAAmB;IAC1D,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACrD,YAAY,CAAC,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AACD,MAAM,UAAU,cAAc,CAC5B,CAAU,EACV,QAAgB,EAChB,EAAW,EACX,SAAkB,EAClB,OAAuB;IAEvB,YAAY,CACV,MAAM,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,OAAO,KAAK,CAAC;QACf,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACrB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC;QAC3B,CAAC,CAAC,WAAW,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;QACtB,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QACrB,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC,CAAC,KAAK,KAAK,OAAO,CACtB,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC;IAC7C,YAAY,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;IACrD,YAAY,CACV,IAAI;QACF,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe;QACzD,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,sBAAsB,CACvE,CAAC;IACF,IAAI,SAAS;QAAE,YAAY,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,EACtC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,EACzB,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/B,YAAY,CAAC,GAAG,IAAI,KAAK,IAAI,OAAO,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAAC,CAAC;IACnF,MAAM,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC;IAClC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACrC,YAAY,CAAC,QAAQ,IAAI,KAAK,IAAI,QAAQ,IAAI,GAAG,CAAC,CAAC;IACnD,YAAY,CACV,CAAC,CAAC,MAAM,KAAK,QAAQ;QACnB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;QAC/C,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAC3D,CAAC;IACF,MAAM,WAAW,GAAG;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE;QAC5B,YAAY,CACV,MAAM,CAAC,CAAC,CAAC;YACP,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;YACpC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAChB,CAAC,CAAC,aAAa,KAAK,CAAC;YACrB,CAAC,CAAC,kBAAkB,KAAK,CAAC,CAAC,KAAK,CACnC,CAAC;QACF,IAAI,IAAI;YACN,YAAY,CACV,OAAO,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;gBACzD,OAAO,CAAC,CAAC,kBAAkB,KAAK,SAAS;gBACzC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CACzF,CAAC;;YACC,YAAY,CAAC,CAAC,CAAC,UAAU,KAAK,cAAc,IAAI,CAAC,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC;QACpF,OAAO;YACL,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,aAAa,EAAE,CAAC;YAChB,kBAAkB,EAAE,CAAC,CAAC,KAAK;YAC3B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,GAAG,CAAC,IAAI;gBACN,CAAC,CAAC;oBACE,qBAAqB,EAAE,CAAC,CAAC,qBAAqB;oBAC9C,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;iBACzC;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC,CAAC;IACF,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,IAAI;QAAE,YAAY,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;SACzC,CAAC;QACJ,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QACvB,YAAY,CACV,MAAM,CAAC,CAAC,CAAC;YACP,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC;YAC1B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAChB,CAAC,CAAC,MAAM,KAAK,SAAS;YACtB,OAAO,CAAC,CAAC,oBAAoB,KAAK,SAAS,CAC9C,CAAC;QACF,UAAU,GAAG;YACX,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,SAAS;YACjB,oBAAoB,EAAE,CAAC,CAAC,oBAAoB;SAC7C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,CACV,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACd,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAChB,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,oBAAoB,IAAI,OAAO,CAAC;YACnE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,oBAAoB,IAAI,OAAO,CAAC;YACnE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,IAAI,KAAK,CAAC,GAAG,WAAW,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,OAAO;QACd,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,qBAAqB,EAAE,WAAW;QAClC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACxB,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAe,EACf,MAAe,EACf,QAAiB,oBAAoB;IAErC,YAAY,CACV,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAgB,CAAC;QAC3D,OAAO,CAAC,MAAM,CAAC;QACf,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,gBAAgB,CAAC;QACnC,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,KAAK,CAAC,CACvC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,MAAsB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3D,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtF,IACE,CAAC,KAAK,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC,CAClF;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEpD,OAAO,EAAE,IAAI,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC3D,CAAC;AACD,MAAM,UAAU,UAAU,CACxB,QAAsB,EACtB,EAAU,EACV,KAAqC;IAErC,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,EACxB,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IACzB,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACpB,YAAY,CACV,OAAO,GAAG,KAAK,QAAQ;YACrB,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;YAC3B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACvB,CAAC;QACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC,CAAC;IACF,YAAY,CACV,CAAC,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,0BAA0B,CACrF,CAAC;IACF,YAAY,CACV,MAAM,CAAC,gBAAgB,CAAC,KAAK,KAAK,CAAC,MAAM;QACvC,MAAM,CAAC,iBAAiB,CAAC,KAAK,KAAK,CAAC,MAAM;QAC1C,MAAM,CAAC,sBAAsB,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;QAC9D,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAC9B,CAAC;IACF,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC;IACzC,YAAY,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO;QACL,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;QACxC,GAAG;QACH,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,GAAG,aAAa,CAAC,KAAK,CAAC;KACxB,CAAC;AACJ,CAAC;AACD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAmB,EACnB,QAAiB,EACjB,EAAoD;IAEpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,EACtC,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,OAAO;QAAE,KAAK,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,qBAAqB,CAAC,EACvE,MAAM,GAAG,UAAU,CAAC,MAAM,EAC1B,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,qBAAqB,CAAC;IAClD,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG;YAAE,MAAM,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;QACtF,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,mBAAmB,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG;YAAE,MAAM,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;QACtF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,QAAQ;YACrB,CAAC,CAAC,sIAAsI;YACxI,CAAC,CAAC,+CAA+C,CAAC;QACpD,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,YAAY,cAAc;YACnD,OAAO,OAAO,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;QAC3D,IAAI,KAAK,YAAY,QAAQ;YAC3B,OAAO,iBAAiB,CACtB,OAAO,CACL,mCAAmC,KAAK,CAAC,MAAM,mFAAmF,MAAM,EAAE,CAC3I,EACD,KAAK,CACN,CAAC;QACJ,OAAO,OAAO,CAAC,0DAA0D,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3C,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AACD,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,CAAU,EAAE,MAAc;IAC5D,IACE,CAAC,MAAM,CAAC,CAAC,CAAC;QACV,MAAM,KAAK,GAAG;QACd,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACtB,CAAC,CAAC,SAAS,KAAK,KAAK;QACrB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;QAC9C,OAAO,CAAC,CAAC,aAAa,KAAK,SAAS;QACpC,OAAO,CAAC,CAAC,aAAa,KAAK,SAAS;QAEpC,OAAO,SAAS,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5F,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,kEAAkE,EACjF,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC7B,IACE,CAAC,CACC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACpB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC;gBACrB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACpB,CAAC,KAAK,EAAE;gBACR,CAAC,KAAK,EAAE,CACT;gBAED,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IACE,GAAG;YACH,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAEzF,OAAO,SAAS,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,OAAO,SAAS,CAAC;IACvE,CAAC;IACD,OAAO,CAAC,CAAC,SAAS,CAAC;AACrB,CAAC"}

package/dist/secret-errors.d.ts

@@ -0,0 +1,59 @@
+/**
+ * The one way an error leaves the Api from a secret-store route (OPL-5026).
+ *
+ * A request to `secrets` or `secrets/:id` may carry a secret value, and every
+ * piece of a response is text the other end chose: a refusal's sentence, a
+ * reason, a header, a redirect's Location, the text of a transport failure. A
+ * filter per field kept leaking through the next field nobody had filtered, so
+ * instead every error raised for these routes — an HTTP refusal, a redirect, a
+ * malformed answer, a network failure, a cancellation, anything else — is
+ * REBUILT here before it is thrown, from a short list of things that cannot
+ * carry a value:
+ *
+ * - the numeric status and the request's method;
+ * - a `reason` that is exactly one of the documented words;
+ * - a request id in the platform's own UUID format, from the header;
+ * - an `Allow` that is a comma list of HTTP method names.
+ *
+ * Everything else is dropped: `Location`, `WWW-Authenticate`, the body, the
+ * original message and any `cause`. Each kind of error gets a fixed message
+ * that names the route pattern (never the id) and the method. As a last layer,
+ * a kept field that shares four or more characters with the value sent is
+ * dropped too.
+ *
+ * The class is kept — a 404 is still a {@link NotFoundError}, a 409 a
+ * {@link ConflictError}, a lost answer a {@link ConnectivityInterruptedError} —
+ * so `instanceof` and {@link isTransient} answer as they would have.
+ */
+import { MandalaError } from './errors.js';
+/** A secret store answer that arrived and is not the documented shape. */
+export declare class MalformedSecretAnswerError extends MandalaError {
+    name: string;
+}
+/** An `Allow` value made only of HTTP method names, comma-separated. */
+export declare function isAllowList(v: unknown): v is string;
+/** Which of the two store routes a canonical relative path names. */
+export type SecretRoute = 'secrets' | 'secrets/:id';
+/**
+ * The store route a canonical path (relative to the API root, no leading
+ * slash, percent-decoded) names, or `undefined`. Case-insensitive, because
+ * treating a path that is not the store as if it were costs a plainer error
+ * message and nothing else, while the reverse leaks.
+ */
+export declare function secretRouteOf(canonical: string): SecretRoute | undefined;
+/** Whether a path is one of the account's secret store routes, as written. */
+export declare function isSecretStoreRoute(path: string): boolean;
+/**
+ * The secret a request carries, read without letting anything escape: a
+ * getter that throws, a proxy, anything that is not a plain string is no value.
+ */
+export declare function secretValueOf(read: () => unknown): string | undefined;
+/**
+ * The error to throw in place of `err`, for a request to a secret-store route.
+ *
+ * `value` reads the secret the request carried, if any; it is read here, under
+ * this function's own guard. Never throws: if anything goes wrong while
+ * rebuilding, the answer is a fixed error carrying the status and method only.
+ */
+export declare function sanitizeSecretError(err: unknown, method: string, route: SecretRoute, value?: () => unknown): Error;
+//# sourceMappingURL=secret-errors.d.ts.map

package/dist/secret-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-errors.d.ts","sourceRoot":"","sources":["../src/secret-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAUL,YAAY,EAab,MAAM,aAAa,CAAC;AAGrB,0EAA0E;AAC1E,qBAAa,0BAA2B,SAAQ,YAAY;IACjD,IAAI,SAAgC;CAC9C;AAYD,wEAAwE;AACxE,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAGnD;AAKD,qEAAqE;AACrE,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,aAAa,CAAC;AAEpD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAQxE;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMxD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,OAAO,GAAG,MAAM,GAAG,SAAS,CAUrE;AA2BD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,WAAW,EAClB,KAAK,GAAE,MAAM,OAAyB,GACrC,KAAK,CA2BP"}

package/dist/secret-errors.js

@@ -0,0 +1,199 @@
+/**
+ * The one way an error leaves the Api from a secret-store route (OPL-5026).
+ *
+ * A request to `secrets` or `secrets/:id` may carry a secret value, and every
+ * piece of a response is text the other end chose: a refusal's sentence, a
+ * reason, a header, a redirect's Location, the text of a transport failure. A
+ * filter per field kept leaking through the next field nobody had filtered, so
+ * instead every error raised for these routes — an HTTP refusal, a redirect, a
+ * malformed answer, a network failure, a cancellation, anything else — is
+ * REBUILT here before it is thrown, from a short list of things that cannot
+ * carry a value:
+ *
+ * - the numeric status and the request's method;
+ * - a `reason` that is exactly one of the documented words;
+ * - a request id in the platform's own UUID format, from the header;
+ * - an `Allow` that is a comma list of HTTP method names.
+ *
+ * Everything else is dropped: `Location`, `WWW-Authenticate`, the body, the
+ * original message and any `cause`. Each kind of error gets a fixed message
+ * that names the route pattern (never the id) and the method. As a last layer,
+ * a kept field that shares four or more characters with the value sent is
+ * dropped too.
+ *
+ * The class is kept — a 404 is still a {@link NotFoundError}, a 409 a
+ * {@link ConflictError}, a lost answer a {@link ConnectivityInterruptedError} —
+ * so `instanceof` and {@link isTransient} answer as they would have.
+ */
+import { APIError, AuthenticationError, CancelledError, ConflictError, ConnectivityError, ConnectivityInterruptedError, CreateOnlyConflictError, FileExistsError, GatewayTimeoutError, MandalaError, MethodNotAllowedError, MoveRequiredError, NotFoundError, OriginResponseError, OriginTLSError, OriginUnreachableError, PermissionDeniedError, PlanLimitError, RangeNotSatisfiableError, RateLimitError, RedirectError, UnavailableError, } from './errors.js';
+import { DOCUMENTED_REASONS, isRequestId, overlaps } from './secret-store.js';
+/** A secret store answer that arrived and is not the documented shape. */
+export class MalformedSecretAnswerError extends MandalaError {
+    name = 'MalformedSecretAnswerError';
+}
+const METHOD_TOKENS = new Set([
+    'GET',
+    'HEAD',
+    'POST',
+    'PUT',
+    'PATCH',
+    'DELETE',
+    'OPTIONS',
+]);
+/** An `Allow` value made only of HTTP method names, comma-separated. */
+export function isAllowList(v) {
+    if (typeof v !== 'string' || v.trim() === '')
+        return false;
+    return v.split(',').every((t) => METHOD_TOKENS.has(t.trim()));
+}
+/** Errors already rebuilt here, so a second pass leaves them alone. */
+const SANITIZED = new WeakSet();
+/**
+ * The store route a canonical path (relative to the API root, no leading
+ * slash, percent-decoded) names, or `undefined`. Case-insensitive, because
+ * treating a path that is not the store as if it were costs a plainer error
+ * message and nothing else, while the reverse leaks.
+ */
+export function secretRouteOf(canonical) {
+    const parts = canonical.toLowerCase().split('/').filter(Boolean);
+    if (parts[0] !== 'secrets')
+        return undefined;
+    if (parts.length === 1)
+        return 'secrets';
+    // Anything deeper is the store too, conservatively: an id carrying an
+    // encoded slash decodes into extra segments, and the platform has no other
+    // route under `secrets`, so sanitizing a descendant costs nothing.
+    return 'secrets/:id';
+}
+/** Whether a path is one of the account's secret store routes, as written. */
+export function isSecretStoreRoute(path) {
+    try {
+        return secretRouteOf(decodeURIComponent(path.split('?')[0])) !== undefined;
+    }
+    catch {
+        return true;
+    }
+}
+/**
+ * The secret a request carries, read without letting anything escape: a
+ * getter that throws, a proxy, anything that is not a plain string is no value.
+ */
+export function secretValueOf(read) {
+    try {
+        const body = read();
+        if (body === null || typeof body !== 'object')
+            return typeof body === 'string' ? body : undefined;
+        const v = body.value;
+        return typeof v === 'string' ? v : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The error classes a secret-route error keeps, by the constructor that made
+ * it. Kept by CLASS, independently of which of its fields survive redaction,
+ * so {@link isTransient} gives the same answer after as before — a 409 `exists`
+ * whose reason overlaps the value is still a FileExistsError.
+ */
+const KEPT_CLASSES = new Set([
+    APIError,
+    AuthenticationError,
+    PlanLimitError,
+    PermissionDeniedError,
+    NotFoundError,
+    MethodNotAllowedError,
+    ConflictError,
+    FileExistsError,
+    CreateOnlyConflictError,
+    RateLimitError,
+    UnavailableError,
+    GatewayTimeoutError,
+    OriginUnreachableError,
+    RedirectError,
+    OriginResponseError,
+    OriginTLSError,
+]);
+/**
+ * The error to throw in place of `err`, for a request to a secret-store route.
+ *
+ * `value` reads the secret the request carried, if any; it is read here, under
+ * this function's own guard. Never throws: if anything goes wrong while
+ * rebuilding, the answer is a fixed error carrying the status and method only.
+ */
+export function sanitizeSecretError(err, method, route, value = () => undefined) {
+    const verb = safeVerb(method);
+    const where = `${verb} /${route}`;
+    let status;
+    try {
+        if (err !== null && typeof err === 'object' && SANITIZED.has(err))
+            return err;
+        if (err instanceof APIError && Number.isInteger(err.status))
+            status = err.status;
+        const secret = secretValueOf(value);
+        const out = rebuild(err, verb, where, secret);
+        SANITIZED.add(out);
+        return out;
+    }
+    catch {
+        const out = status === undefined
+            ? new MandalaError(`${where} failed (details not shown).`)
+            : new APIError(`${where} was answered HTTP ${status} (details not shown).`, status, undefined, undefined, {
+                method: verb,
+            });
+        SANITIZED.add(out);
+        return out;
+    }
+}
+function safeVerb(method) {
+    try {
+        const v = String(method).toUpperCase();
+        return /^[A-Z]{1,10}$/.test(v) ? v : 'REQUEST';
+    }
+    catch {
+        return 'REQUEST';
+    }
+}
+function rebuild(err, verb, where, value) {
+    const change = verb !== 'GET' && verb !== 'HEAD';
+    const mayHave = change
+        ? ' THE CHANGE MAY HAVE BEEN MADE — read the secret back before sending it again.'
+        : '';
+    const keep = (v) => v === undefined || (value !== undefined && value !== '' && overlaps(v, value)) ? undefined : v;
+    if (err instanceof APIError) {
+        const status = err.status;
+        const reason = typeof err.reason === 'string' && DOCUMENTED_REASONS.has(err.reason)
+            ? keep(err.reason)
+            : undefined;
+        // No Retry-After, no body, no header text beyond these three, no cause.
+        const meta = {
+            requestId: isRequestId(err.requestId) ? keep(err.requestId) : undefined,
+            allow: isAllowList(err.allow) ? keep(err.allow) : undefined,
+            method: verb,
+        };
+        const body = reason === undefined ? undefined : { reason };
+        const said = err instanceof RedirectError
+            ? `${where} was answered HTTP ${status}, a redirect this client does not follow; check MANDALA_BASE_URL. The response is not shown.`
+            : `${where} was answered HTTP ${status}. The response is not shown, because a secret-store response could echo the value.`;
+        if (err instanceof RangeNotSatisfiableError)
+            return new RangeNotSatisfiableError(said, status, body, undefined, undefined, meta);
+        if (err instanceof MoveRequiredError)
+            return new MoveRequiredError(said, status, body, err.movePossible === true, undefined, meta);
+        const Ctor = KEPT_CLASSES.has(err.constructor)
+            ? err.constructor
+            : APIError;
+        return new Ctor(said, status, body, undefined, meta);
+    }
+    if (err instanceof MalformedSecretAnswerError)
+        return new MalformedSecretAnswerError(`${where} answered with something that is not the documented secret shape (not shown).${mayHave}`);
+    if (err instanceof CancelledError)
+        return new CancelledError(`${where} was cancelled before its answer arrived.${change ? ' The change may have been made.' : ''}`);
+    if (err instanceof ConnectivityInterruptedError)
+        return new ConnectivityInterruptedError(`${where}: the connection was lost before the answer arrived.${mayHave}`);
+    if (err instanceof ConnectivityError)
+        return new ConnectivityError(`${where}: the platform could not be reached.`);
+    if (err instanceof MandalaError)
+        return new MandalaError(`${where}: the answer could not be read (not shown).${mayHave}`);
+    return new MandalaError(`${where} failed inside this client (details not shown).${mayHave}`);
+}
+//# sourceMappingURL=secret-errors.js.map

package/dist/secret-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-errors.js","sourceRoot":"","sources":["../src/secret-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EACL,QAAQ,EACR,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,4BAA4B,EAC5B,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,cAAc,EACd,wBAAwB,EACxB,cAAc,EACd,aAAa,EACb,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE9E,0EAA0E;AAC1E,MAAM,OAAO,0BAA2B,SAAQ,YAAY;IACjD,IAAI,GAAG,4BAA4B,CAAC;CAC9C;AAED,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,UAAU,WAAW,CAAC,CAAU;IACpC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,uEAAuE;AACvE,MAAM,SAAS,GAAG,IAAI,OAAO,EAAU,CAAC;AAKxC;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,sEAAsE;IACtE,2EAA2E;IAC3E,mEAAmE;IACnE,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC;QACpB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAC3C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACrD,MAAM,CAAC,GAAI,IAA4B,CAAC,KAAK,CAAC;QAC9C,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,YAAY,GAAyB,IAAI,GAAG,CAAU;IAC1D,QAAQ;IACR,mBAAmB;IACnB,cAAc;IACd,qBAAqB;IACrB,aAAa;IACb,qBAAqB;IACrB,aAAa;IACb,eAAe;IACf,uBAAuB;IACvB,cAAc;IACd,gBAAgB;IAChB,mBAAmB;IACnB,sBAAsB;IACtB,aAAa;IACb,mBAAmB;IACnB,cAAc;CACf,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAY,EACZ,MAAc,EACd,KAAkB,EAClB,QAAuB,GAAG,EAAE,CAAC,SAAS;IAEtC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC;IAClC,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,GAAY,CAAC;QACvF,IAAI,GAAG,YAAY,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACjF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC9C,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,GACP,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,IAAI,YAAY,CAAC,GAAG,KAAK,8BAA8B,CAAC;YAC1D,CAAC,CAAC,IAAI,QAAQ,CACV,GAAG,KAAK,sBAAsB,MAAM,uBAAuB,EAC3D,MAAM,EACN,SAAS,EACT,SAAS,EACT;gBACE,MAAM,EAAE,IAAI;aACb,CACF,CAAC;QACR,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAe;IAC/B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAY,EAAE,IAAY,EAAE,KAAa,EAAE,KAAyB;IACnF,MAAM,MAAM,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM;QACpB,CAAC,CAAC,gFAAgF;QAClF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAsB,EAAE,CACzD,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjG,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,MAAM,GACV,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAClB,CAAC,CAAC,SAAS,CAAC;QAChB,wEAAwE;QACxE,MAAM,IAAI,GAAG;YACX,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YACvE,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,MAAM,EAAE,IAAI;SACb,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3D,MAAM,IAAI,GACR,GAAG,YAAY,aAAa;YAC1B,CAAC,CAAC,GAAG,KAAK,sBAAsB,MAAM,8FAA8F;YACpI,CAAC,CAAC,GAAG,KAAK,sBAAsB,MAAM,oFAAoF,CAAC;QAC/H,IAAI,GAAG,YAAY,wBAAwB;YACzC,OAAO,IAAI,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACtF,IAAI,GAAG,YAAY,iBAAiB;YAClC,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,KAAK,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;YAC5C,CAAC,CAAE,GAAG,CAAC,WAA+B;YACtC,CAAC,CAAC,QAAQ,CAAC;QACb,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,GAAG,YAAY,0BAA0B;QAC3C,OAAO,IAAI,0BAA0B,CACnC,GAAG,KAAK,gFAAgF,OAAO,EAAE,CAClG,CAAC;IACJ,IAAI,GAAG,YAAY,cAAc;QAC/B,OAAO,IAAI,cAAc,CACvB,GAAG,KAAK,4CAA4C,MAAM,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,EAAE,CACtG,CAAC;IACJ,IAAI,GAAG,YAAY,4BAA4B;QAC7C,OAAO,IAAI,4BAA4B,CACrC,GAAG,KAAK,uDAAuD,OAAO,EAAE,CACzE,CAAC;IACJ,IAAI,GAAG,YAAY,iBAAiB;QAClC,OAAO,IAAI,iBAAiB,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAC/E,IAAI,GAAG,YAAY,YAAY;QAC7B,OAAO,IAAI,YAAY,CAAC,GAAG,KAAK,8CAA8C,OAAO,EAAE,CAAC,CAAC;IAC3F,OAAO,IAAI,YAAY,CAAC,GAAG,KAAK,kDAAkD,OAAO,EAAE,CAAC,CAAC;AAC/F,CAAC"}