node-autotask 0.8.0 → 0.8.1

package/dist/chunk-IFXFOYDU.cjs

@@ -1,32 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/credential-shape.ts
-var QUOTE_CHARS = /* @__PURE__ */ new Set(["'", '"']);
-function hasSurroundingQuotes(value) {
-  if (value.length < 2) return false;
-  const first = value[0];
-  return QUOTE_CHARS.has(first) && value[value.length - 1] === first;
-}
-function credentialShapeProblem(value, options = {}) {
-  if (!options.skipEdgeWhitespace) {
-    if (/^\s/.test(value)) return "leading whitespace";
-    if (/\s$/.test(value)) return "trailing whitespace";
-  }
-  if (!options.skipSurroundingQuotes && hasSurroundingQuotes(value)) {
-    return "single- or double-quote surrounding the value";
-  }
-  if (value.includes("\r")) return "carriage return";
-  return void 0;
-}
-var CREDENTIAL_ENV_LOAD_ACTION = "value appears shell-quoted or line-break contaminated \u2014 check how your env file was loaded (single-quoted values must be shell-sourced, not parsed by a quote-preserving loader)";
-var MIN_PREFIX_SUMMARY_LENGTH = 4;
-function credentialValueSummary(value) {
-  return value.length >= MIN_PREFIX_SUMMARY_LENGTH ? `len ${value.length}, starts "${value.slice(0, 2)}"` : "short value (length withheld)";
-}
-
-
-
-
-
-
-
-exports.hasSurroundingQuotes = hasSurroundingQuotes; exports.credentialShapeProblem = credentialShapeProblem; exports.CREDENTIAL_ENV_LOAD_ACTION = CREDENTIAL_ENV_LOAD_ACTION; exports.MIN_PREFIX_SUMMARY_LENGTH = MIN_PREFIX_SUMMARY_LENGTH; exports.credentialValueSummary = credentialValueSummary;
-//# sourceMappingURL=chunk-IFXFOYDU.cjs.map

package/dist/chunk-IFXFOYDU.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/Users/maxs/gitrepos/node-autotask/dist/chunk-IFXFOYDU.cjs","../src/credential-shape.ts"],"names":[],"mappings":"AAAA;ACoCA,IAAM,YAAA,kBAAc,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,GAAG,CAAC,CAAA;AAG/B,SAAS,oBAAA,CAAqB,KAAA,EAAwB;AAC3D,EAAA,GAAA,CAAI,KAAA,CAAM,OAAA,EAAS,CAAA,EAAG,OAAO,KAAA;AAC7B,EAAA,MAAM,MAAA,EAAQ,KAAA,CAAM,CAAC,CAAA;AACrB,EAAA,OAAO,WAAA,CAAY,GAAA,CAAI,KAAK,EAAA,GAAK,KAAA,CAAM,KAAA,CAAM,OAAA,EAAS,CAAC,EAAA,IAAM,KAAA;AAC/D;AAOO,SAAS,sBAAA,CACd,KAAA,EACA,QAAA,EAAkC,CAAC,CAAA,EACC;AACpC,EAAA,GAAA,CAAI,CAAC,OAAA,CAAQ,kBAAA,EAAoB;AAC/B,IAAA,GAAA,CAAI,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA,EAAG,OAAO,oBAAA;AAC9B,IAAA,GAAA,CAAI,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA,EAAG,OAAO,qBAAA;AAAA,EAChC;AACA,EAAA,GAAA,CAAI,CAAC,OAAA,CAAQ,sBAAA,GAAyB,oBAAA,CAAqB,KAAK,CAAA,EAAG;AACjE,IAAA,OAAO,+CAAA;AAAA,EACT;AACA,EAAA,GAAA,CAAI,KAAA,CAAM,QAAA,CAAS,IAAI,CAAA,EAAG,OAAO,iBAAA;AACjC,EAAA,OAAO,KAAA,CAAA;AACT;AAGO,IAAM,2BAAA,EACX,uLAAA;AAOK,IAAM,0BAAA,EAA4B,CAAA;AAOlC,SAAS,sBAAA,CAAuB,KAAA,EAAuB;AAC5D,EAAA,OAAO,KAAA,CAAM,OAAA,GAAU,0BAAA,EACnB,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,UAAA,EAAa,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA,EAAA,EACjD,+BAAA;AACN;AD9DA;AACA;AACE;AACA;AACA;AACA;AACA;AACF,sSAAC","file":"/Users/maxs/gitrepos/node-autotask/dist/chunk-IFXFOYDU.cjs","sourcesContent":[null,"/**\n * Credential VALUE shape checks — the intake guard for the 2026-10-07 incident class.\n *\n * A `.env` file may SINGLE-QUOTE a value on purpose (a secret containing `$` must be\n * single-quoted so the shell does not expand it). The shell strips those quotes when the file\n * is loaded with `set -a; . ./.env; set +a`; a quote-PRESERVING loader (most `dotenv` variants,\n * a hand-rolled `split('=')`) hands the value over with its quotes intact. Such a value is\n * printable ASCII, so it passes every check in the transport, reaches the vendor as\n * `Secret: 'a$b'` and comes back as an opaque 401 that looks like bad credentials. The\n * incidents this guards against cost three probe cycles before anyone suspected the load.\n *\n * `credentialShapeProblem()` names the artifact WITHOUT ever repeating the value; callers turn it\n * into a typed, value-free error (construction) or a value-free `diagnostic` (401 annotation).\n *\n * Two knobs match the two call sites:\n * - interior CR/LF is always reported (a leak risk and a fetch `TypeError` risk, unhealthy for a\n *   value however it was loaded);\n * - edge whitespace and surrounding quotes are reported by default and only skipped where the\n *   caller legitimately normalizes blank/trim (`skipEdgeWhitespace`, `skipSurroundingQuotes`).\n */\n\n/** The shape artifacts a loaded credential value can carry. */\nexport type CredentialShapeProblem =\n  | 'leading whitespace'\n  | 'trailing whitespace'\n  | 'single- or double-quote surrounding the value'\n  | 'carriage return';\n\n/** Where the guards do not apply, because the caller normalizes that artifact itself. */\nexport interface CredentialShapeOptions {\n  /** Skip the edge-whitespace check (call sites that refuse whitespace-only values). */\n  skipEdgeWhitespace?: boolean;\n  /** Skip the surrounding-quote check (call sites that refuse whitespace-only values). */\n  skipSurroundingQuotes?: boolean;\n}\n\nconst QUOTE_CHARS = new Set([\"'\", '\"']);\n\n/** True when `value` starts AND ends with a quote character (one shell-quote artifact). */\nexport function hasSurroundingQuotes(value: string): boolean {\n  if (value.length < 2) return false;\n  const first = value[0] as string;\n  return QUOTE_CHARS.has(first) && value[value.length - 1] === first;\n}\n\n/**\n * The FIRST shape problem in `value`, or `undefined` when its shape is clean. Value-free by\n * construction: the result is one of the fixed strings in {@link CredentialShapeProblem}.\n * A CR is reported even in the middle of a value; CRLF is caught by the same check.\n */\nexport function credentialShapeProblem(\n  value: string,\n  options: CredentialShapeOptions = {},\n): CredentialShapeProblem | undefined {\n  if (!options.skipEdgeWhitespace) {\n    if (/^\\s/.test(value)) return 'leading whitespace';\n    if (/\\s$/.test(value)) return 'trailing whitespace';\n  }\n  if (!options.skipSurroundingQuotes && hasSurroundingQuotes(value)) {\n    return 'single- or double-quote surrounding the value';\n  }\n  if (value.includes('\\r')) return 'carriage return';\n  return undefined;\n}\n\n/** The env-load pitfall every shape rejection points at, without claiming which loader was used. */\nexport const CREDENTIAL_ENV_LOAD_ACTION =\n  'value appears shell-quoted or line-break contaminated — check how your env file was loaded ' +\n  '(single-quoted values must be shell-sourced, not parsed by a quote-preserving loader)';\n\n/**\n * Shortest value the 2-character prefix summary is printed for. Below it a prefix is a large\n * fraction of the secret, so the summary prints `(short)` instead of two characters.\n */\nexport const MIN_PREFIX_SUMMARY_LENGTH = 4;\n\n/**\n * A value-free summary of a credential value: its LENGTH and its FIRST TWO CHARACTERS only, or\n * `(short)` when the value is too short for a 2-character prefix to be safe. The rest of the\n * value is never reproduced, so the summary is safe to print in a log, a CLI report or a test.\n */\nexport function credentialValueSummary(value: string): string {\n  return value.length >= MIN_PREFIX_SUMMARY_LENGTH\n    ? `len ${value.length}, starts \"${value.slice(0, 2)}\"`\n    : 'short value (length withheld)';\n}\n"]}