node-autotask 0.8.0 → 0.8.1

package/dist/credential-shape.cjs

@@ -1,15 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-
-
-
-var _chunkIFXFOYDUcjs = require('./chunk-IFXFOYDU.cjs');
-
-
-
-
-
-
-exports.CREDENTIAL_ENV_LOAD_ACTION = _chunkIFXFOYDUcjs.CREDENTIAL_ENV_LOAD_ACTION; exports.MIN_PREFIX_SUMMARY_LENGTH = _chunkIFXFOYDUcjs.MIN_PREFIX_SUMMARY_LENGTH; exports.credentialShapeProblem = _chunkIFXFOYDUcjs.credentialShapeProblem; exports.credentialValueSummary = _chunkIFXFOYDUcjs.credentialValueSummary; exports.hasSurroundingQuotes = _chunkIFXFOYDUcjs.hasSurroundingQuotes;
-//# sourceMappingURL=credential-shape.cjs.map

package/dist/credential-shape.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/Users/maxs/gitrepos/node-autotask/dist/credential-shape.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACF,gYAAC","file":"/Users/maxs/gitrepos/node-autotask/dist/credential-shape.cjs"}

package/dist/credential-shape.d.cts

@@ -1,52 +0,0 @@
-/**
- * Credential VALUE shape checks — the intake guard for the 2026-10-07 incident class.
- *
- * A `.env` file may SINGLE-QUOTE a value on purpose (a secret containing `$` must be
- * single-quoted so the shell does not expand it). The shell strips those quotes when the file
- * is loaded with `set -a; . ./.env; set +a`; a quote-PRESERVING loader (most `dotenv` variants,
- * a hand-rolled `split('=')`) hands the value over with its quotes intact. Such a value is
- * printable ASCII, so it passes every check in the transport, reaches the vendor as
- * `Secret: 'a$b'` and comes back as an opaque 401 that looks like bad credentials. The
- * incidents this guards against cost three probe cycles before anyone suspected the load.
- *
- * `credentialShapeProblem()` names the artifact WITHOUT ever repeating the value; callers turn it
- * into a typed, value-free error (construction) or a value-free `diagnostic` (401 annotation).
- *
- * Two knobs match the two call sites:
- * - interior CR/LF is always reported (a leak risk and a fetch `TypeError` risk, unhealthy for a
- *   value however it was loaded);
- * - edge whitespace and surrounding quotes are reported by default and only skipped where the
- *   caller legitimately normalizes blank/trim (`skipEdgeWhitespace`, `skipSurroundingQuotes`).
- */
-/** The shape artifacts a loaded credential value can carry. */
-type CredentialShapeProblem = 'leading whitespace' | 'trailing whitespace' | 'single- or double-quote surrounding the value' | 'carriage return';
-/** Where the guards do not apply, because the caller normalizes that artifact itself. */
-interface CredentialShapeOptions {
-    /** Skip the edge-whitespace check (call sites that refuse whitespace-only values). */
-    skipEdgeWhitespace?: boolean;
-    /** Skip the surrounding-quote check (call sites that refuse whitespace-only values). */
-    skipSurroundingQuotes?: boolean;
-}
-/** True when `value` starts AND ends with a quote character (one shell-quote artifact). */
-declare function hasSurroundingQuotes(value: string): boolean;
-/**
- * The FIRST shape problem in `value`, or `undefined` when its shape is clean. Value-free by
- * construction: the result is one of the fixed strings in {@link CredentialShapeProblem}.
- * A CR is reported even in the middle of a value; CRLF is caught by the same check.
- */
-declare function credentialShapeProblem(value: string, options?: CredentialShapeOptions): CredentialShapeProblem | undefined;
-/** The env-load pitfall every shape rejection points at, without claiming which loader was used. */
-declare const CREDENTIAL_ENV_LOAD_ACTION: string;
-/**
- * Shortest value the 2-character prefix summary is printed for. Below it a prefix is a large
- * fraction of the secret, so the summary prints `(short)` instead of two characters.
- */
-declare const MIN_PREFIX_SUMMARY_LENGTH = 4;
-/**
- * A value-free summary of a credential value: its LENGTH and its FIRST TWO CHARACTERS only, or
- * `(short)` when the value is too short for a 2-character prefix to be safe. The rest of the
- * value is never reproduced, so the summary is safe to print in a log, a CLI report or a test.
- */
-declare function credentialValueSummary(value: string): string;
-
-export { CREDENTIAL_ENV_LOAD_ACTION, type CredentialShapeOptions, type CredentialShapeProblem, MIN_PREFIX_SUMMARY_LENGTH, credentialShapeProblem, credentialValueSummary, hasSurroundingQuotes };

package/dist/credential-shape.d.ts

@@ -1,52 +0,0 @@
-/**
- * Credential VALUE shape checks — the intake guard for the 2026-10-07 incident class.
- *
- * A `.env` file may SINGLE-QUOTE a value on purpose (a secret containing `$` must be
- * single-quoted so the shell does not expand it). The shell strips those quotes when the file
- * is loaded with `set -a; . ./.env; set +a`; a quote-PRESERVING loader (most `dotenv` variants,
- * a hand-rolled `split('=')`) hands the value over with its quotes intact. Such a value is
- * printable ASCII, so it passes every check in the transport, reaches the vendor as
- * `Secret: 'a$b'` and comes back as an opaque 401 that looks like bad credentials. The
- * incidents this guards against cost three probe cycles before anyone suspected the load.
- *
- * `credentialShapeProblem()` names the artifact WITHOUT ever repeating the value; callers turn it
- * into a typed, value-free error (construction) or a value-free `diagnostic` (401 annotation).
- *
- * Two knobs match the two call sites:
- * - interior CR/LF is always reported (a leak risk and a fetch `TypeError` risk, unhealthy for a
- *   value however it was loaded);
- * - edge whitespace and surrounding quotes are reported by default and only skipped where the
- *   caller legitimately normalizes blank/trim (`skipEdgeWhitespace`, `skipSurroundingQuotes`).
- */
-/** The shape artifacts a loaded credential value can carry. */
-type CredentialShapeProblem = 'leading whitespace' | 'trailing whitespace' | 'single- or double-quote surrounding the value' | 'carriage return';
-/** Where the guards do not apply, because the caller normalizes that artifact itself. */
-interface CredentialShapeOptions {
-    /** Skip the edge-whitespace check (call sites that refuse whitespace-only values). */
-    skipEdgeWhitespace?: boolean;
-    /** Skip the surrounding-quote check (call sites that refuse whitespace-only values). */
-    skipSurroundingQuotes?: boolean;
-}
-/** True when `value` starts AND ends with a quote character (one shell-quote artifact). */
-declare function hasSurroundingQuotes(value: string): boolean;
-/**
- * The FIRST shape problem in `value`, or `undefined` when its shape is clean. Value-free by
- * construction: the result is one of the fixed strings in {@link CredentialShapeProblem}.
- * A CR is reported even in the middle of a value; CRLF is caught by the same check.
- */
-declare function credentialShapeProblem(value: string, options?: CredentialShapeOptions): CredentialShapeProblem | undefined;
-/** The env-load pitfall every shape rejection points at, without claiming which loader was used. */
-declare const CREDENTIAL_ENV_LOAD_ACTION: string;
-/**
- * Shortest value the 2-character prefix summary is printed for. Below it a prefix is a large
- * fraction of the secret, so the summary prints `(short)` instead of two characters.
- */
-declare const MIN_PREFIX_SUMMARY_LENGTH = 4;
-/**
- * A value-free summary of a credential value: its LENGTH and its FIRST TWO CHARACTERS only, or
- * `(short)` when the value is too short for a 2-character prefix to be safe. The rest of the
- * value is never reproduced, so the summary is safe to print in a log, a CLI report or a test.
- */
-declare function credentialValueSummary(value: string): string;
-
-export { CREDENTIAL_ENV_LOAD_ACTION, type CredentialShapeOptions, type CredentialShapeProblem, MIN_PREFIX_SUMMARY_LENGTH, credentialShapeProblem, credentialValueSummary, hasSurroundingQuotes };

package/dist/credential-shape.js

@@ -1,15 +0,0 @@
-import {
-  CREDENTIAL_ENV_LOAD_ACTION,
-  MIN_PREFIX_SUMMARY_LENGTH,
-  credentialShapeProblem,
-  credentialValueSummary,
-  hasSurroundingQuotes
-} from "./chunk-QF4K3XTK.js";
-export {
-  CREDENTIAL_ENV_LOAD_ACTION,
-  MIN_PREFIX_SUMMARY_LENGTH,
-  credentialShapeProblem,
-  credentialValueSummary,
-  hasSurroundingQuotes
-};
-//# sourceMappingURL=credential-shape.js.map

package/dist/credential-shape.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/credentials.cjs

@@ -1,17 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-
-
-
-var _chunkPBBFMRI5cjs = require('./chunk-PBBFMRI5.cjs');
-require('./chunk-5QVXRT3A.cjs');
-require('./chunk-IFXFOYDU.cjs');
-
-
-
-
-
-
-exports.loadAutotaskCredentialEnvFile = _chunkPBBFMRI5cjs.loadAutotaskCredentialEnvFile; exports.loadAutotaskCredentialsFromEnv = _chunkPBBFMRI5cjs.loadAutotaskCredentialsFromEnv; exports.normalizeCredentialValue = _chunkPBBFMRI5cjs.normalizeCredentialValue; exports.parseCredentialEnvText = _chunkPBBFMRI5cjs.parseCredentialEnvText; exports.readCredentialEnvFile = _chunkPBBFMRI5cjs.readCredentialEnvFile;
-//# sourceMappingURL=credentials.cjs.map

package/dist/credentials.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/Users/maxs/gitrepos/node-autotask/dist/credentials.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B,gCAA6B;AAC7B,gCAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACF,sZAAC","file":"/Users/maxs/gitrepos/node-autotask/dist/credentials.cjs"}

package/dist/credentials.d.cts

@@ -1,78 +0,0 @@
-/**
- * The variable names an Autotask host loads. The three credential names are the canonical
- * spellings (the official API-User-Security terms: Tracking Identifier / Username /
- * Password-Secret). The two DEPRECATED aliases the live scripts still accept
- * (`AUTOTASK_API_CODE` / `AUTOTASK_API_INTEGRATION_CODE` for the tracking identifier,
- * `AUTOTASK_USER` for the username) are read as fall-backs, canonical first.
- */
-interface AutotaskCredentialNames {
-    /** Tracking-identifier variable. Default `AUTOTASK_TRACKING_IDENTIFIER`. */
-    apiCodeVar?: string;
-    /** Username variable. Default `AUTOTASK_USERNAME`. */
-    userVar?: string;
-    /** Password/secret variable. Default `AUTOTASK_SECRET`. */
-    secretVar?: string;
-    /** Optional impersonation resource id variable. Default `AUTOTASK_IMPERSONATION_ID`. */
-    impersonationVar?: string;
-}
-/** A loaded, shape-validated Autotask credential set. */
-interface AutotaskCredentials {
-    /** The tracking identifier (header `ApiIntegrationCode`), shell-equivalent loaded. */
-    apiIntegrationCode: string;
-    /** The username (header `UserName`), shell-equivalent loaded. */
-    userName: string;
-    /** The secret (header `Secret`), with ONE pair of surrounding quotes removed when quoted. */
-    secret: string;
-    /** The optional impersonation resource id (header `ImpersonationResourceId`), when set. */
-    impersonationResourceId?: string;
-}
-/**
- * Shell-equivalent value handling: strip ONE pair of matching surrounding single OR double quotes
- * (only `'x'`/`"x"`, never `'x"`), drop a `\r` left by a CRLF file, and trim edge whitespace.
- * The inner characters are never unescaped or expanded — a `$` inside single quotes is literal,
- * exactly as the shell delivers it.
- */
-declare function normalizeCredentialValue(raw: string): string;
-/** One parsed `key=value` line from an env file. */
-interface CredentialEnvLine {
-    key: string;
-    value: string;
-}
-/**
- * Minimal shell-sourcing-equivalent `.env` parser: `key=value` per line, `#` comments, an optional
- * `export ` prefix, and ONE pair of matching surrounding quotes stripped from the value. Blank
- * lines are skipped. This is deliberately NOT a general dotenv implementation: no `$` expansion,
- * no multi-line values, no command substitution — a credential file should need none of them.
- */
-declare function parseCredentialEnvText(text: string): CredentialEnvLine[];
-/**
- * Read a `key=value` env file with shell-equivalent value handling and return its own key/value
- * map. Use it when the host wants the whole file; {@link loadAutotaskCredentialsFromEnv} uses it to
- * read the AUTOTASK_* variables. Throws `AutotaskConfigError` (code `CONFIG_ERROR`) when the path
- * does not exist or is not a regular file.
- */
-declare function readCredentialEnvFile(path: string): Record<string, string>;
-/**
- * Load the Autotask credentials from an env FILE with the shell's own value handling (the
- * single-quote contract above). Pass the result to
- * `new AutotaskClient({ ...creds })`.
- *
- * The values go through {@link normalizeCredentialValue} and then the shape check, so a
- * quote-preserving load is impossible here; a contaminated value fails `AutotaskConfigError` with
- * code `INVALID_CREDENTIAL_SHAPE` and NO request is ever sent.
- */
-declare function loadAutotaskCredentialEnvFile(path: string, names?: AutotaskCredentialNames): AutotaskCredentials;
-/**
- * Load the Autotask credentials from a process-env-shaped record (default `process.env`) using the
- * SAME shell-equivalent value handling and shape checks as the file loader — the one path the
- * live scripts, a shell-sourced env and a caller-supplied record all share.
- *
- * Values already correct in `process.env` are returned unchanged; a value that was placed there
- * with its quotes intact (e.g. by a quote-preserving loader) is repaired by the same ONE-pair
- * strip, and a value that no load can repair fails closed. The two DEPRECATED aliases
- * (`AUTOTASK_API_CODE` / `AUTOTASK_API_INTEGRATION_CODE`, `AUTOTASK_USER`) are read as fall-backs
- * when the canonical variable is unset or blank — canonical first.
- */
-declare function loadAutotaskCredentialsFromEnv(env?: Record<string, string | undefined>, names?: AutotaskCredentialNames): AutotaskCredentials;
-
-export { type AutotaskCredentialNames, type AutotaskCredentials, type CredentialEnvLine, loadAutotaskCredentialEnvFile, loadAutotaskCredentialsFromEnv, normalizeCredentialValue, parseCredentialEnvText, readCredentialEnvFile };

package/dist/credentials.d.ts

@@ -1,78 +0,0 @@
-/**
- * The variable names an Autotask host loads. The three credential names are the canonical
- * spellings (the official API-User-Security terms: Tracking Identifier / Username /
- * Password-Secret). The two DEPRECATED aliases the live scripts still accept
- * (`AUTOTASK_API_CODE` / `AUTOTASK_API_INTEGRATION_CODE` for the tracking identifier,
- * `AUTOTASK_USER` for the username) are read as fall-backs, canonical first.
- */
-interface AutotaskCredentialNames {
-    /** Tracking-identifier variable. Default `AUTOTASK_TRACKING_IDENTIFIER`. */
-    apiCodeVar?: string;
-    /** Username variable. Default `AUTOTASK_USERNAME`. */
-    userVar?: string;
-    /** Password/secret variable. Default `AUTOTASK_SECRET`. */
-    secretVar?: string;
-    /** Optional impersonation resource id variable. Default `AUTOTASK_IMPERSONATION_ID`. */
-    impersonationVar?: string;
-}
-/** A loaded, shape-validated Autotask credential set. */
-interface AutotaskCredentials {
-    /** The tracking identifier (header `ApiIntegrationCode`), shell-equivalent loaded. */
-    apiIntegrationCode: string;
-    /** The username (header `UserName`), shell-equivalent loaded. */
-    userName: string;
-    /** The secret (header `Secret`), with ONE pair of surrounding quotes removed when quoted. */
-    secret: string;
-    /** The optional impersonation resource id (header `ImpersonationResourceId`), when set. */
-    impersonationResourceId?: string;
-}
-/**
- * Shell-equivalent value handling: strip ONE pair of matching surrounding single OR double quotes
- * (only `'x'`/`"x"`, never `'x"`), drop a `\r` left by a CRLF file, and trim edge whitespace.
- * The inner characters are never unescaped or expanded — a `$` inside single quotes is literal,
- * exactly as the shell delivers it.
- */
-declare function normalizeCredentialValue(raw: string): string;
-/** One parsed `key=value` line from an env file. */
-interface CredentialEnvLine {
-    key: string;
-    value: string;
-}
-/**
- * Minimal shell-sourcing-equivalent `.env` parser: `key=value` per line, `#` comments, an optional
- * `export ` prefix, and ONE pair of matching surrounding quotes stripped from the value. Blank
- * lines are skipped. This is deliberately NOT a general dotenv implementation: no `$` expansion,
- * no multi-line values, no command substitution — a credential file should need none of them.
- */
-declare function parseCredentialEnvText(text: string): CredentialEnvLine[];
-/**
- * Read a `key=value` env file with shell-equivalent value handling and return its own key/value
- * map. Use it when the host wants the whole file; {@link loadAutotaskCredentialsFromEnv} uses it to
- * read the AUTOTASK_* variables. Throws `AutotaskConfigError` (code `CONFIG_ERROR`) when the path
- * does not exist or is not a regular file.
- */
-declare function readCredentialEnvFile(path: string): Record<string, string>;
-/**
- * Load the Autotask credentials from an env FILE with the shell's own value handling (the
- * single-quote contract above). Pass the result to
- * `new AutotaskClient({ ...creds })`.
- *
- * The values go through {@link normalizeCredentialValue} and then the shape check, so a
- * quote-preserving load is impossible here; a contaminated value fails `AutotaskConfigError` with
- * code `INVALID_CREDENTIAL_SHAPE` and NO request is ever sent.
- */
-declare function loadAutotaskCredentialEnvFile(path: string, names?: AutotaskCredentialNames): AutotaskCredentials;
-/**
- * Load the Autotask credentials from a process-env-shaped record (default `process.env`) using the
- * SAME shell-equivalent value handling and shape checks as the file loader — the one path the
- * live scripts, a shell-sourced env and a caller-supplied record all share.
- *
- * Values already correct in `process.env` are returned unchanged; a value that was placed there
- * with its quotes intact (e.g. by a quote-preserving loader) is repaired by the same ONE-pair
- * strip, and a value that no load can repair fails closed. The two DEPRECATED aliases
- * (`AUTOTASK_API_CODE` / `AUTOTASK_API_INTEGRATION_CODE`, `AUTOTASK_USER`) are read as fall-backs
- * when the canonical variable is unset or blank — canonical first.
- */
-declare function loadAutotaskCredentialsFromEnv(env?: Record<string, string | undefined>, names?: AutotaskCredentialNames): AutotaskCredentials;
-
-export { type AutotaskCredentialNames, type AutotaskCredentials, type CredentialEnvLine, loadAutotaskCredentialEnvFile, loadAutotaskCredentialsFromEnv, normalizeCredentialValue, parseCredentialEnvText, readCredentialEnvFile };

package/dist/credentials.js

@@ -1,17 +0,0 @@
-import {
-  loadAutotaskCredentialEnvFile,
-  loadAutotaskCredentialsFromEnv,
-  normalizeCredentialValue,
-  parseCredentialEnvText,
-  readCredentialEnvFile
-} from "./chunk-OOEVTGP4.js";
-import "./chunk-FE225M76.js";
-import "./chunk-QF4K3XTK.js";
-export {
-  loadAutotaskCredentialEnvFile,
-  loadAutotaskCredentialsFromEnv,
-  normalizeCredentialValue,
-  parseCredentialEnvText,
-  readCredentialEnvFile
-};
-//# sourceMappingURL=credentials.js.map

package/dist/credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}